Marmel.AIMarmel.ai

Privacy Policy

Last updated: March 1, 2025

1. Introduction

Marmel.AI (“Marmel.AI,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, share, and safeguard information when you use our website, crowdfunding services, or related products (collectively, the “Platform”).

This Policy complies with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Estonian Personal Data Protection Act, and other applicable EU and Estonian data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Marmel.AI OÜ
Registered in Tallinn, Estonia
Email: [email protected]

3. Personal Data We Collect

We collect and process the following categories of personal data when you use the Platform:

  • Account Data: name, email address, password, and profile information.
  • Project Data: information you submit about your project, including text, images, videos, and other content.
  • Financial Data: payment details, connected account information, and transaction history (processed through Stripe Connect).
  • Usage Data: activity logs, interaction history, device identifiers, IP address, browser type, and platform analytics.
  • Support Data: communications you send to us (e.g., customer support or feedback messages).

4. How We Collect Data

  • Directly from you, when you create an account, publish a project, or communicate with us.
  • Automatically, through cookies, analytics tools, and similar technologies when you interact with the Platform.
  • From third parties, including Stripe and analytics providers, to verify transactions or improve performance.

5. Legal Bases for Processing

Under GDPR, we process your personal data only when a lawful basis applies. These include:

  • Contractual necessity – to operate your account, process payments, and deliver services you request.
  • Legitimate interests – to analyze usage, prevent fraud, and improve the Platform’s security and performance.
  • Legal obligations – to comply with financial regulations, tax reporting, and anti-fraud requirements.
  • Consent – when you opt into marketing or optional data collection (e.g., cookies or newsletters).

6. How We Use Your Data

  • To create and manage your user account and projects.
  • To facilitate payments and withdrawals via Stripe Connect.
  • To communicate important updates, service notifications, and support responses.
  • To analyze usage trends and optimize user experience.
  • To promote published projects on Marmel.AI or affiliated channels.
  • To comply with legal requirements, resolve disputes, and enforce our Terms of Service.

7. Payments and Stripe Compliance

Marmel.AI uses Stripe Connect to process all financial transactions. When you contribute or receive funds, Stripe acts as an independent data controller for payment data, including card numbers, billing addresses, and transaction verification. We do not have access to your full payment details.

Stripe complies with PCI-DSS (Payment Card Industry Data Security Standard) and GDPR. For more information about Stripe’s data processing, see theStripe Privacy Policy.

8. Cookies and Analytics

We use cookies, pixels, and analytics tools (such as Google Analytics or similar) to measure Platform performance, understand user engagement, and enhance usability. Some cookies are essential for security and session management, while others require your consent under EU law.

9. Data Sharing and Disclosure

We may share your personal data only in the following circumstances:

  • With Stripe and other payment processors for transaction execution.
  • With analytics and service partners to evaluate performance and enhance the Platform.
  • With affiliated distribution partners when you opt to publish or monetize your video project.
  • Where required by law, to competent authorities, regulators, or courts.

We do not sell or rent your personal data to third parties for marketing purposes.

10. International Data Transfers

Your data may be transferred and processed outside the European Economic Area (EEA), particularly when we use cloud hosting, CDN, or analytics providers. In such cases, we ensure adequate safeguards, including EU Standard Contractual Clauses or equivalent data protection mechanisms.

11. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, or resolve disputes. Account data is stored while your account remains active. You may request deletion at any time (see Section 14).

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, loss, or destruction. These include encryption, pseudonymization, secure hosting, and access controls. However, no system can be completely secure, and we cannot guarantee absolute protection.

13. Your Rights Under GDPR

As a data subject under EU law, you have the following rights:

  • Right of access – obtain a copy of your personal data.
  • Right to rectification – correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) – request deletion of your data under certain conditions.
  • Right to restriction of processing – limit how we use your data.
  • Right to data portability – receive your data in a structured, machine-readable format.
  • Right to object – oppose processing based on legitimate interests or direct marketing.
  • Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

To exercise these rights, contact us at[email protected].

14. Supervisory Authority

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local EU supervisory authority if you believe your rights under GDPR have been violated.

Andmekaitse Inspektsioon
Website: https://www.aki.ee
Email: [email protected]

15. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our operational practices. The latest version will always be available on our website with an updated “Last updated” date. Continued use of the Platform after any changes constitutes acceptance of the revised Policy.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer (DPO) at:

Email: [email protected]