Privacy Policy

Last updated: 1 November 2026

1. Who we are

Marginfort LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA ("Marginfort", "we") runs the Marginfort website and software. Contact us about privacy at [email protected].

2. Two roles we play

• Controller for data about our own customers (sellers) and website visitors: account, billing contact, support and marketing data.
• Processor (service provider) for personal data of our customers' shoppers that comes from connected stores (for example a buyer's name and address on an order). We process it only on the seller's instructions to provide the Service. Shoppers should contact the seller they bought from; we will help the seller answer.

3. What we collect

• Account data: name, business name, email, password (stored hashed), team members and settings.
• Store data you connect: orders, products, inventory, fees, payouts, disputes and ad performance, as allowed by the permissions you grant on each platform.
• Billing data: plan and invoice details. Card details are handled by Paddle or Shopify; we never see or store full card numbers.
• Support data: messages you send us, including chats with our AI support assistant.
• Authorisation records: which actions you enabled, by whom, when, from which IP address and under which terms version.
• Waitlist data: your email, the platform you sell on most, the date you joined and your country (from your connection). Used only to tell you about the launch; deleted 12 months after launch or when you ask.
• Website data: basic server logs (IP address, browser, pages visited) for security. Our website does not use advertising or tracking cookies.

We collect only what the Service needs.

4. Why we use it (and our legal basis)

• To provide the Service you signed up for (contract).
• To bill you, keep records and meet tax and legal duties (legal obligation).
• To keep the Service secure and prevent fraud and abuse (legitimate interests).
• To send product and service emails; marketing emails only where allowed, with an easy unsubscribe (consent or legitimate interests).

We do not sell personal data and do not share it for cross-context behavioural advertising. We do not use your store data or your customers' data to train AI models.

5. Who we share it with

Only with service providers that help us run Marginfort, under contracts that protect the data:

• Paddle.com (Merchant of Record: payments, invoices, tax) and Shopify (billing for App Store subscriptions).
• Anthropic (AI model provider used to analyse data and draft content).
• Cloud hosting and database providers (servers in the EU and the US).
• Cloudflare (website, security and email routing) and Google (email).
• The platforms you connect (such as Shopify, Amazon and WooCommerce), when we act on them for you.

We may also share data where the law requires it, or with a buyer of our business, who must keep this policy's protections.

6. International transfers

We and our providers may process data outside your country, including in the United States and the European Union. Where the law requires it, we use recognised safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

• Store data: while your store is connected; deleted within 30 days after you disconnect it or close your account.
• Amazon shopper personal information: kept only as long as needed for the order and deleted within 30 days after delivery, as Amazon's Data Protection Policy requires.
• Chargeback evidence: until the dispute closes, plus up to 18 months for follow-up claims.
• Billing records: as long as tax law requires.
• Authorisation records: for the life of your account plus the legal limitation period.
• Backups: rolling, overwritten within 35 days.

8. Security

We encrypt data in transit and at rest, limit access to people and systems that need it, use two-factor authentication on our own accounts, and log access. If a breach affects your data, we will tell you without undue delay.

9. Your rights

Depending on where you live (for example under the EU or UK GDPR, California law or Jordan's Personal Data Protection Law), you can ask to access, correct, delete or export your personal data, object to or restrict some uses, and withdraw consent. Email [email protected]; we answer within 30 days. You can also complain to your local data protection authority. We will not treat you differently for using your rights.

10. Children

Marginfort is a business service and is not meant for anyone under 18.

11. Changes

We will post any changes here and update the date above. For important changes we will also email account holders.

12. Contact

Marginfort LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA · [email protected]