Privacy Policy

Marech(“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use marech.tech and related services (the “Service”).

• Provide, operate, and improve the Service
• Detect and classify AI bot traffic on your behalf
• Send transactional emails (receipts, alerts, security notices)
• Send product updates if you opt in
• Comply with legal obligations
• Investigate abuse and enforce our Terms of Service

We do not sell your personal data to third parties. We do not use your website visitor data to train AI models.

Bot traffic logs are retained for 90 days by default. Aggregated analytics (totals, trends) are retained indefinitely. Account data is retained until you delete your account, after which it is purged within 30 days.

We share data only in these circumstances:

• Service providers — payment processors (Stripe), cloud infrastructure (AWS), and email delivery who are bound by confidentiality agreements
• Legal requirements — when required by law, court order, or government request
• Business transfer — in the event of a merger or acquisition, subject to the same privacy commitments

We use essential cookies for authentication and session management. We use analytics cookies (e.g. Plausible or similar privacy-first tools) to understand dashboard usage. We do not use third-party advertising cookies.

You can disable cookies in your browser, but this may break authentication.

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We enforce access controls and conduct regular security reviews. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email privacy@marech.tech. We will respond within 30 days.

The Service is not directed at children under 13. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us and we will delete it promptly.

We operate primarily in the United States. If you are located outside the US, your data may be transferred to and processed in the US. Where required by law (e.g. GDPR), we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

If you are in the European Economic Area, our lawful bases for processing are: (a) contract performance for operating the Service; (b) legitimate interests for security and abuse prevention; (c) legal obligation for compliance; and (d) consent where applicable. You have the right to lodge a complaint with your local supervisory authority.

California residents may request disclosure of personal information collected, sold, or disclosed, and may opt out of the “sale” of personal information. Marech does not sell personal information. To submit a verifiable consumer request, email privacy@marech.tech.

We may update this policy. Material changes will be notified via email or an in-app banner at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

Privacy questions or requests: privacy@marech.tech

Marech · Privacy Team · Delaware, USA