Privacy Policy

We collect: (a) information you give us — name, email, company, billing details and anything you submit through forms or the waitlist; (b) usage data — pages viewed, device and browser information, and approximate location, collected via cookies and analytics; and (c) customer workspace data — the leads, orders, invoices and records our customers process inside the platform.

We use personal data to provide and improve the service, authenticate accounts, process payments, send service and (where permitted) marketing communications, prevent fraud and abuse, and comply with legal obligations. Our legal bases include contract performance, legitimate interests, consent (for marketing and non-essential cookies) and legal compliance.

We share data with sub-processors that help us run the service (hosting, payments, email and analytics providers), bound by data-processing agreements. We do not sell your personal data. We may disclose data where required by law or to protect our rights and users.

Data may be processed in the EU and other countries. Where data leaves the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

We keep personal data only as long as necessary for the purposes above or as required by law. Customer workspace data is retained per the customer agreement and deleted on request or after account closure.

Subject to applicable law (including the GDPR), you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. To exercise these rights, contact us at the address below. You may also lodge a complaint with your local data-protection authority.

We use tenant isolation, encryption in transit, access controls and audit logging to protect data. No method of transmission or storage is completely secure, but we work to protect your information using industry-standard measures.

When you choose to connect a Google account (for example, Google Search Console), we request read-only access to that account's data through Google OAuth. Specifically, we may access your Google Search Console performance data — clicks, impressions, average position, search queries and pages (scope webmasters.readonly) — and your basic Google profile email (scopes openid, email) to label the connected account. We use this data solely to display your own search performance and SEO insights inside your Merkoll dashboard. We also use the Google Web Search Indexing API (scope https://www.googleapis.com/auth/indexing) to notify Google to (re)crawl a page on your own connected site when you publish or update it in Merkoll; we submit only URLs on your own verified property, and only in response to your own publish action.

Merkoll's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, do not use it for advertising, and do not transfer it to third parties except as necessary to provide the feature you requested, to comply with applicable law, or as part of a merger or acquisition. Human access to this data is not permitted except with your explicit consent, for security or legal purposes, or to operate the feature. You can revoke access at any time by disconnecting the integration in your dashboard or via your Google Account permissions, after which we stop accessing the data and delete stored tokens.

Questions or requests: privacy@merkoll.com.