1Who we are & scope
MarketDX (the “Service”) is operated by Market Anyware Co., Ltd. (“MarketDX”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website, create an account, or use our API and related services.
It applies to all users of the Service. It does not apply to third-party websites or services that we link to but do not control. By using the Service you acknowledge this Policy; if you do not agree, please do not use the Service.
2Information we collect
Information you provide
- Account data — name, email address, and authentication identifiers when you register (authentication is handled via Firebase Authentication).
- Billing data — plan selection and billing details. Card payments are processed by Stripe; we do not store full card numbers on our systems.
- Communications — messages you send us for support or enquiries.
Information collected automatically
- Usage data — API requests, endpoints called, credits consumed, timestamps, and request metadata, used for metering, billing, security, and reliability.
- Technical data — IP address, browser/user-agent, device and log information.
- Cookies — see Cookies & analytics.
The data served by our API (news, company, and market metadata) concerns publicly traded and other commercial entities and is not personal data about you.
3How we use your information
- Provide, operate, and maintain the Service and your account.
- Meter usage, calculate credits, process payments, and prevent abuse.
- Secure the Service, debug, and maintain reliability.
- Communicate service notices, and — where permitted — product updates (you may opt out of marketing).
- Improve our products and comply with legal obligations.
4Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we process personal data on the bases of: performance of a contract (providing the Service), legitimate interests (security, abuse prevention, product improvement), consent (certain cookies/marketing), and legal obligation.
5Sharing & sub-processors
We do not sell your personal data. We share it only with service providers that process data on our behalf under appropriate agreements, including:
- Google Firebase / Google Cloud — authentication, hosting, and infrastructure.
- Stripe — payment processing.
- Analytics and email/communication providers, as applicable.
We may also disclose data where required by law, to enforce our Terms of Service, or in connection with a corporate transaction (e.g. merger or acquisition).
6Cookies & analytics
Strictly necessary cookies operate the site and authenticate your session; these are always on.
Product analytics. We use PostHog (first-party analytics) to understand — in aggregate — how the site and console are used, and to improve them. PostHog runs in a cookieless, aggregate mode for all visitors: it stores no cookie or identifier on your device and creates no individual profile for anonymous visitors. Because it places nothing on your device and is not used to identify you, we run it under our legitimate interest in improving the Service, and it requires no consent. If you accept advertising cookies (below) or sign in, we may enable a persistent first-party identifier so that your own product usage links across your sessions.
Advertising & retargeting. Only if you choose “Accept all” do we load third-party advertising cookies/pixels — Google (Ads & GA4), LinkedIn, X, and Meta — to measure campaigns and show you relevant ads on those platforms. We may also send hashed conversion signals (e.g. a hashed email) to these providers server-side to measure ad performance.
Your choice. The consent banner controls third-party advertising pixels only — never the cookieless analytics above, which always runs. Because prior opt-in for advertising cookies is required in the EEA, UK and Switzerland, we show the banner (“Accept all” / “Necessary only”) to visitors in those regions; “Necessary only” keeps advertising pixels off. Elsewhere, advertising pixels are enabled by default and you can turn them off at any time by clearing this site’s data or by contacting us at marketdx@lab.ai. You can change your choice at any time by clearing this site’s data in your browser (which re-shows the banner where applicable).
7Data retention
We retain personal data for as long as your account is active and as needed to provide the Service, then for the period required to meet legal, tax, accounting, and security obligations, after which it is deleted or anonymised.
8Security
We use technical and organisational measures — including encryption in transit, access controls, and scoped API keys — to protect your data. No method of transmission or storage is completely secure; keep your API keys confidential and rotate them if you suspect compromise.
9International transfers
We and our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for such transfers.
10Your rights
Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing or withdraw consent. To exercise these rights, contact us at marketdx@lab.ai. You may also have the right to lodge a complaint with your local data protection authority.
11Children
The Service is intended for business and professional use and is not directed to individuals under the age of 18. We do not knowingly collect personal data from children.
12Changes to this Policy
We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.
