Privacy Policy

Last updated: September 15, 2025

1. Data Controller

The data controller responsible for your personal data under applicable data protection laws (including the General Data Protection Regulation "GDPR") is:

Markix
Operated by: Caner Bozkurt
Email: caner@markix.com
Address: Septimerstraße 24, 13407 Berlin

2. Data We Collect

We may collect and process the following categories of personal data:

Account Information

Name, email address, and login credentials (collected directly or via Twitter OAuth2).

Authentication Data

When you log in with Twitter OAuth2, we receive information from Twitter, such as your Twitter ID, display name, and email (if permitted by Twitter).

Payment Information

If you purchase paid services, payment data is processed by our payment provider, Stripe. We do not store your full payment details.

Usage Data

Information about your interactions with our services, including IP address, browser type, device information, and access times. Analytics are provided by Plausible, a privacy-focused analytics service that does not use cookies.

Content Data

Tweets you generate, topics you select, scheduled tweets, and any content you create using our AI-powered services.

Marketing Preferences

Information you provide when subscribing to our newsletter or other marketing communications.

3. Purposes of Processing

We process your personal data for the following purposes:

  • To provide and operate the Markix service, including AI-powered tweet generation and scheduling
  • To manage user authentication and account access via Twitter OAuth2
  • To process payments and prevent fraudulent transactions (via Stripe)
  • To analyze service performance and usage trends (via Plausible)
  • To send marketing communications, newsletters, and service updates where you have provided consent or as otherwise permitted by law
  • To provide customer support and respond to your inquiries
  • To comply with legal obligations and enforce our terms of service
  • To improve our AI models and service quality through aggregated, anonymized usage data

4. Legal Basis for Processing

We process your data under the following legal bases:

Contractual necessity: To provide the service you request and fulfill our contractual obligations.
Legitimate interests: To improve our services, prevent fraud, ensure security, and analyze usage patterns.
Consent: For marketing communications and, where required, for analytics.
Legal obligation: To comply with applicable law and regulatory requirements.

5. Data Sharing

We may share your personal data with the following categories of recipients:

Service Providers

  • Stripe, Inc. - Payment processing and subscription management
  • Plausible Insights OÜ - Privacy-focused analytics and website statistics
  • Twitter, Inc. - Authentication via OAuth2 and tweet publishing
  • OpenAI/Perplexity AI - AI-powered content generation services
  • Fal.ai - AI-powered image generation services

Legal Authorities

When required by law, regulation, or legal proceedings.

Other Third Parties

Only with your explicit consent.

Important: We do not sell or rent your personal data to third parties.

6. International Data Transfers

Your personal data is stored on servers located in the European Union. However, certain service providers (e.g., Stripe, Twitter, OpenAI) may process data outside the EU. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent protections to ensure your data receives adequate protection.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, unless a longer retention period is required by law. Specifically:

  • Account data: Retained while your account is active and for 30 days after account deletion
  • Generated content: Retained for 12 months to provide service continuity and support
  • Payment data: Retained as required by financial regulations (typically 7 years)
  • Usage analytics: Aggregated and anonymized data may be retained indefinitely for service improvement

When no longer needed, data will be securely deleted or anonymized.

8. Your Rights

Under the GDPR and other applicable data protection laws, you have the right to:

Access & Portability

  • Access your personal data
  • Receive a copy of your data in a portable format

Correction & Deletion

  • Rectify inaccurate or incomplete data
  • Erase your personal data ("right to be forgotten")

Control & Objection

  • Restrict or object to processing
  • Withdraw consent at any time

Legal Recourse

  • Lodge a complaint with a supervisory authority
  • Seek judicial remedy

To exercise your rights, contact us at: caner@markix.com

9. Children's Privacy

Markix is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected such data, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Secure data centers with physical security measures
  • Employee training on data protection practices

However, no method of transmission over the internet is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

11. Marketing Communications

With your consent, we may send you newsletters and promotional emails about our services, new features, and special offers. You may opt out at any time by:

  • Following the unsubscribe link in our emails
  • Updating your preferences in your account settings
  • Contacting us directly at caner@markix.com

Please note that even if you opt out of marketing communications, we may still send you important service-related messages.

12. AI and Machine Learning

Markix uses artificial intelligence and machine learning to generate content and improve our services. This includes:

  • AI-powered tweet generation using third-party services (OpenAI, Perplexity AI)
  • Image generation using Fal.ai services
  • Content analysis and optimization
  • Usage pattern analysis to improve service quality

Your content may be processed by these AI services to generate personalized results. We ensure that all AI service providers maintain appropriate data protection standards.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with a revised "Effective date." Significant changes will be communicated to you by email or through the service. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, you may contact us at:

Email: caner@markix.com
Address: [Your Address]
Website: markix.bot

We will respond to your inquiry within 30 days of receipt.