Privacy Policy

1. Introduction

Market4Me.ai (“Market4Me”, “we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, who we share it with, and the rights and choices you have when you use the Market4Me platform, website, and APIs (the “Service”). Market4Me operates from the United Kingdom and acts as the data controller for the personal data described here, except where noted in Section 4 (where we process on your behalf). Contact: [email protected].

2. Information We Collect

Account information. Name, email address, and login credentials (managed by our authentication provider, Clerk); organisation, team, and workspace details; plan, credit balance, and billing status. Payments are processed by Stripe — your full card details never touch our servers; we receive only payment status, the last four digits, and card type.

Content you provide. Prompts and scripts; photos, images, video, and audio you upload — including photos or footage of yourself or others used to create AI characters or spokespersons, and voice recordings you submit to create a voice clone; brand details you enter; competitor names or URLs you ask us to research; and, when you connect a website URL, the public content of that site which we analyse to build your brand profile.

Voice and likeness data. Voice recordings and facial imagery used for cloning features may qualify as biometric or special-category data in some jurisdictions. We process them only with your explicit consent, given when you use the feature, and only for the purpose you requested (see Section 4).

Generated content. The videos, images, music, and audio the Service creates for you, and the settings, prompts, and credit usage associated with them.

Connected platform data. If you connect a social or advertising account (for example TikTok or Meta), we receive the access tokens and the account, content, ad, and performance data those platforms make available for the features you use — such as post metrics, ad campaign structure, and spend. We access only what is needed to provide the features you enable, subject to each platform’s rules.

Usage data. Device and browser information, IP address, approximate location, pages viewed, and product interaction events (including onboarding progress), collected through first-party analytics and cookies, plus session analytics via Microsoft Clarity where you consent to it.

Communications. Messages you send to support, survey responses, and records of emails we send you (including delivery and open status where our email provider records it).

Public and third-party sources. For competitor and market intelligence features, we collect publicly available information about businesses (websites, public social content, public ad libraries, search data). This is primarily company information, but may incidentally include personal data of people associated with those businesses (for example a founder’s name in public content).

3. How We Use Your Information

We use your information to:

• provide and operate the Service — including generating the content you request (your inputs are sent to AI infrastructure providers to run the generation);
• create and maintain your account, workspaces, brand profiles, and saved characters and voices;
• publish, schedule, or run advertising on connected third-party platforms when you instruct or configure the Service to do so;
• provide competitor and market intelligence you request, based on public sources;
• process payments, credits, subscriptions, trials, and affiliate commissions;
• send service communications (receipts, security notices, generation results) and — only if you opted in — product updates and marketing email, which you can unsubscribe from at any time;
• provide support, and analyse usage to improve, debug, and secure the product;
• run content moderation and safety checks on prompts and uploads, including automated screening and, where flagged, human review;
• detect fraud and abuse (including trial and promotion abuse), enforce our Terms, and comply with the law.

We do not use your uploads, prompts, or generated content to train our own or third parties’ AI models, and our contracts with AI infrastructure providers restrict them from doing so with your content. Voice recordings and likeness imagery you upload for cloning are used solely to create and operate the character or voice you requested — never to build voices or characters for anyone else. Under UK/EU GDPR our legal bases are contract performance, legitimate interests (such as security, fraud prevention, and product improvement), consent (where required — e.g. marketing, analytics cookies, and biometric-style voice and likeness data), and legal obligation.

4. Voice Clones, Characters, and Other People's Data

If you upload recordings or images of another person, you are responsible for having their informed consent first, as required by our Terms. To the extent we process personal data of people other than you at your direction (for example a colleague’s consented voice, or customer material you upload), we act as your processor: we process it only on your instructions to provide the Service, and you are the controller responsible for the lawful basis. Any person who believes their voice or likeness is being used on the Service without consent can contact us at [email protected] and we will investigate and remove infringing assets.

5. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with:

• Service providers who help us run the Service under contracts that limit their use of your data: cloud hosting and storage, authentication (Clerk), payment processing (Stripe), email delivery, analytics (including Microsoft Clarity where consented), and customer support tooling;
• AI infrastructure providers that process your prompts and uploads to generate your content, under data-protection agreements that prohibit training on your content;
• Platforms you connect — when you publish, schedule, or run ads through a connected account, the content and campaign settings you chose are sent to that platform, which then processes them under its own privacy policy;
• White-label partners — if you access the Service through a partner’s brand, that partner may see account and usage information for its own customers as needed to operate and bill its offering;
• Professional advisers and authorities where legally required, to protect our rights or safety, or to investigate fraud or abuse;
• A successor in the event of a merger, acquisition, financing, or sale of assets — we will notify you of any change in ownership affecting your data;
• Others at your direction or with your explicit consent, such as team members you invite to your workspace.

6. Data Security

We protect your data with encryption in transit and at rest, enterprise-grade cloud infrastructure, access controls, audit logging, and least-privilege practices. Access tokens for connected platforms are stored encrypted. No method of transmission or storage is 100% secure, but we work to protect your information against unauthorised access, alteration, and loss. If a breach affecting your personal data occurs, we will notify you and the relevant regulator where the law requires it.

7. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. In outline: account and content data — for the life of your account; voice and likeness assets — until you delete them or close your account; connected-platform tokens — until you disconnect the platform or close your account; billing records — as required by tax law (typically 6 years in the UK); support correspondence and security logs — for a limited period appropriate to their purpose. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must retain records for legal, tax, security, or dispute purposes. See our data deletion page for how to request deletion.

8. Your Rights and Choices

Depending on where you live, you can: access a copy of your data; correct inaccurate data; delete your data; export your data in a portable format; object to or restrict certain processing; withdraw consent at any time (including unsubscribing from marketing email, withdrawing analytics-cookie consent, deleting voice or likeness assets, and disconnecting platform accounts); and complain to your data-protection authority — in the UK, the Information Commissioner’s Office (ICO). We do not make solely automated decisions about you that have legal or similarly significant effects. Exercise any of these by emailing [email protected] or using your account settings. We may need to verify your identity before acting on a request, and we respond within the timeframes required by law (one month under UK GDPR, extendable where permitted).

9. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, protect against fraud, and understand how the Service is used. Essential cookies are always active because the Service cannot work without them. Non-essential analytics (including Microsoft Clarity session replay) run only with your consent, which you can give or withdraw via our cookie banner at any time; you can also control cookies in your browser settings. Our marketing website may use advertising pixels (such as the Meta Pixel) to measure our own campaigns, subject to the same consent controls. We currently respond to consent choices made in our banner rather than browser “Do Not Track” signals, though we honour Global Privacy Control signals where the law requires.

10. International Data Transfers

Your information may be processed outside the UK/EEA, including in the United States, where our cloud, AI, and analytics providers operate. Where it is, we rely on appropriate safeguards such as the UK International Data Transfer Agreement/Addendum, EU Standard Contractual Clauses, and, where applicable, providers’ certification under the EU–US Data Privacy Framework and its UK Extension.

11. Children's Privacy

The Service is intended for business and professional use by adults. It is not directed at anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Third-Party Links and Platforms

The Service may link to external sites and platforms (including the social and advertising platforms you connect or publish to). Their privacy practices are their own — this Policy does not cover them. When you connect a platform account, review that platform’s privacy policy and permission screens; you can revoke our access from your settings here or from the platform’s own connected-apps settings.

13. US State Privacy Rights

If you are a resident of California or another US state with a comprehensive privacy law, you have the right to know what personal information we collect, to access, correct, and delete it, and to opt out of its sale or sharing for targeted advertising. We do not sell personal information and do not share it for cross-context behavioural advertising, and we do not discriminate against you for exercising your rights. The categories we collect and our purposes are described in Sections 2 and 3; we do not knowingly collect data of consumers under 16. You may exercise your rights, including through an authorised agent, via [email protected].

14. Changes to This Policy

We may update this Policy from time to time — for example when we add features or change providers. We will post changes on this page with an updated date and, for material changes, notify you by email or in the product before they take effect. Continued use of the Service after a change takes effect constitutes acceptance.

15. Contact Us

Privacy questions or requests: [email protected]. If you are in the UK/EEA and are unhappy with our response, you can complain to the ICO (ico.org.uk) or your local supervisory authority.