Privacy Policy

1 Introduction

Welcome to MarkuzAI. We provide a multi-organization bulk email and WhatsApp communication platform. This Privacy Policy describes how MarkuzAI ("we", "us", or "our") collects, uses, processes, and protects your personal data and the data of your organization’s users.

By using our website, services, and software (collectively, "Services"), you agree to the collection and use of information in accordance with this Privacy Policy.

2 Data We Collect

To run our communication platform, we collect information across three main categories:

• Account Information: Name, business email address, phone number, organization name, payment details, and admin credentials.
• SMTP and Server Credentials: System-level and custom organization-level SMTP host details, username, encrypted passwords, and port configurations required to execute mailing workflows.
• Communication Log Data: Recipient lists, campaign content, open rates, delivery statuses, WhatsApp message templates, and recipient phone numbers uploaded for broadcast.

We do not sell or monetize your databases or contact records. All client data uploaded by organizations remains the sole property of that organization.

3 Usage of Information

We use the information we collect to operate, maintain, and improve our services, specifically:

• Processing plan purchases, validating transaction status (e.g. Razorpay), and administering quotas.
• Routing and dispatching bulk emails and WhatsApp notifications using your configured providers.
• Enforcing system-wide and organization-specific limit thresholds to ensure compliance with service tiers.
• Providing analytics on campaign delivery, bounce rates, and user engagement metrics.

4 Email & WhatsApp Policy

MarkuzAI strictly enforces anti-spam regulations (CAN-SPAM Act and WhatsApp Business Policy):

• All outgoing campaign emails must include a visible, working unsubscribe link.
• Organizations must obtain explicit opt-in consent from recipients before messaging them via WhatsApp.
• We reserve the right to suspend accounts engaged in unsolicited broadcasting or distributing malicious code.

5 Data Security & Retention

We implement enterprise-grade security measures to safeguard your credentials and campaign assets:

• All third-party SMTP and Meta API passwords/tokens are stored encrypted in our database.
• All network traffic is encrypted using SSL/TLS protocols.
• Data is retained only as long as necessary to fulfill the operational requests of your active subscriptions, or until an organization admin requests data deletion.

6 GDPR & International Compliance

If you are accessing the Services from the European Union (EU) or India, you are entitled to certain rights under the GDPR and Digital Personal Data Protection Act (DPDPA):

• The right to request access to and rectification or erasure of your personal data.
• The right to withdraw consent at any time without affecting the lawfulness of processing.
• The right to download your customer databases in standard CSV format.

7 Contact Us

If you have any questions about this Privacy Policy, your data permissions, or security disclosures, please get in touch with us: