Privacy Policy

Marshmellow Marketing is the data controller for the information described here. Questions, requests and complaints can go to info@marshmelmarketing.com.

You give us directly:

• The email address you enter in the newsletter box on our website.
• Anything you send us by email or through a contact form, such as your name, business and enquiry.
• Account details when you sign up — your email address and name — and the workspace you belong to.
• Business records you enter in the CRM: your contacts, deals, notes, appointments and content. That data is yours; you control it and we process it on your behalf.

Collected automatically:

• Session information kept in your browser so you stay signed in.
• Your IP address, recorded briefly by the newsletter form purely to stop spam sign-ups. It is deleted automatically after one day.
• Basic server logs needed to keep the service running and secure.

• To send you marketing tips and product news you asked for.
• To reply when you contact us.
• To provide, maintain and secure the CRM and marketing tools you use.
• To prevent abuse, spam and fraudulent activity.

Marketing emails are sent on the basis of your consent, which you can withdraw at any time. Service messages (billing, security, account changes) are sent because they are necessary to provide the service.

Newsletter sign-ups are stored in our own database and added to our mailing list, which is run through Digital Pulse. Every email we send contains an unsubscribe link that takes effect immediately, and you can also ask us to remove you by replying to info@marshmelmarketing.com.

We do not sell your personal information and we do not share it with advertising networks. We share it only with the providers we need to operate:

• Digital Pulse — runs our newsletter list.
• Our email delivery provider — sends transactional and marketing emails.
• Lovable Cloud — hosts the database, storage and authentication that power the app.
• Stripe — processes payments when invoices or subscriptions are used.
• AI services — when you use the writing, reply-drafting, chat, image or video tools, the text and instructions you give them are sent to our AI providers (including Anthropic for text and Higgsfield for video) so they can produce the result. Their handling of that content is governed by their own privacy terms as well as ours, so please do not put anything you would not want processed there, such as payment card numbers or health information.
• Social platforms (Meta, LinkedIn, Pinterest) — only when you connect an account, and then under their terms as well as ours.
• Google — serves the web fonts our pages load, which records the request like any normal web request.

We may also disclose information where we are legally required to, or to protect our rights, safety or property.

Our website uses browser storage and one small cookie for the sign-in session and for remembering basic preferences such as which workspace you last used. We do not run advertising trackers, and we do not sell browsing data to ad networks, so no consent banner is required.

The app and its database are hosted in the United States, and our business is based there. Some of our providers process information in other countries too, and if you use the app from outside the United States your information may be handled there. Where that happens we rely on those providers' standard contractual data-protection terms.

• Newsletter sign-ups: until you unsubscribe or ask us to delete you.
• Enquiries: for as long as needed to answer and follow up.
• CRM records: until you delete them or your workspace is closed.
• Invoices and payment records: kept for the accounting, tax and legal period that applies.
• Abuse-protection data (IP address): one day.

Wherever you live, you can ask to access, correct, delete, restrict or export your personal information, object to certain processing, or withdraw consent. Email info@marshmelmarketing.com and we will handle the request.

If you are a resident of a US state with its own privacy law — California, Colorado, Connecticut, Texas, Virginia and others — you also have the right to:

• know the categories of personal information we collect, where it comes from, why we use it and who we share it with;
• ask for the specific pieces of personal information we hold about you;
• request deletion of information we obtained directly from you, and request correction;
• opt out of the sale or sharing of your personal information for cross-context behavioural advertising — we do not sell or share it, so there is nothing to opt out of; and
• not be treated unfairly for exercising any of these rights.

Send a request to info@marshmelmarketing.com. Because we identify people by email address, we will usually ask you to confirm the address associated with your information before we answer, and we may need to check your identity where the request is sensitive. You may use an authorised agent to file a request for you; we will ask for written permission. If we decline a request we will tell you why, and where your state allows an appeal you can reply and ask us to review the decision. We aim to answer within 45 days, and may take one further 45-day extension where a request is genuinely complex.

If you are in the EU, UK or another region with a data protection authority, you may also complain to that authority.

Access is restricted to what each account is permitted to see, connections are encrypted, and credentials and integration keys are stored on the server rather than in your browser. No system is perfectly secure, so please tell us promptly if you believe an account is compromised.

Our services are not directed to anyone under 16, and we do not knowingly collect their data.

If we change this policy we will update the date at the top of the page. For material changes affecting account holders, we will also send an email.

Marshmellow Marketing — info@marshmelmarketing.com

This policy follows the law of the State of New York, United States, in line with our Terms of Service.