If you received an email, ad, or message from a brand that uses MarloAI: Marlo Labs handles that data on the brand's instructions, not our own. See "Data we process for our customers" below, and contact the brand directly. We will forward requests we receive about that data to them.
Marlo Labs Inc. ("Marlo Labs," "we," "us," or "our") provides MarloAI, a marketing operations platform for franchise and multi-location brands, and related professional services. This Privacy Policy describes how we process personal information collected through marloai.com, MarloAI, and our marketing, sales, and events activity (together, the "Service").
Two different roles
Marlo Labs handles personal information in two distinct capacities, and your rights differ depending on which applies.
- Data we control
-
Information we collect about visitors to marloai.com, people who contact us, prospective customers, and users who hold a MarloAI account. We decide how and why this information is used. This Privacy Policy governs that information, and you can exercise your rights with us directly.
- Data we process for our customers
-
Information that a Marlo Labs customer submits to, or generates within MarloAI, including their own customer lists, contact records, brand assets, and campaign data. For this information Marlo Labs acts as a processor or service provider. Our customer decides how it is used, and we act only on that customer's documented instructions under our agreement with them.
This Privacy Policy does not govern that information. The customer's own privacy policy does. If you send us a request about data held on a customer's behalf, we will forward it to that customer, tell you we have done so, and pass on their contact point where they have given us one. We will not delete, alter, or disclose that data on your instruction.
Personal information we collect
Information you provide
- Contact data, such as your name, business email address, company name, job title, business phone number, and mailing address.
- Profile data, such as the username, password, and account settings you use to access MarloAI.
- Communications data, from your exchanges with us by email, through the Service, at events, or on social media.
- Marketing data, such as your preferences for receiving communications from us and your engagement with them.
- Content and input data, such as brand guidelines, campaign briefs, prompts, uploaded assets, and other material you or your organization submit to MarloAI, together with associated metadata. Where this material is submitted by a customer organization, see "Data we process for our customers" above.
- Other data not listed here, which we will use as described in this Privacy Policy or as disclosed when we collect it.
We do not collect payment card or bank account information through the Service. Customers are invoiced under their agreement with us.
Third-party sources
- Public sources, such as company websites, public records, and professional networking platforms.
- Data providers and partners, such as business information services and marketing partners.
- Our customers, who may provide contact details for their personnel who will use MarloAI.
- Service providers that help us operate the Service or our business.
- Business transaction partners, in connection with an actual or prospective transaction such as an investment, merger, or acquisition.
Information collected automatically
- Device data, such as operating system, browser type and version, screen resolution, device type, IP address, language settings, and general location inferred from IP address at the city or region level.
- Online activity data, such as pages viewed, time on page, referring website, navigation paths, and access times.
- Communication interaction data, such as whether you opened an email from us or clicked a link in it, collected using pixel tags.
We do not collect precise geolocation from your device.
Cookies and AI technologies
Cookies
We use cookies and similar technologies on marloai.com. Our consent banner, provided by Cookiebot, lets you accept or decline non-essential categories and change your choice at any time. Details of the specific cookies in use are in our Cookie Notice, which is generated from an automated scan of the site and updated as the site changes.
AI technologies
MarloAI uses third-party large language model providers to generate content, recommendations, and campaign structures. Prompts, brand context, and other input data you or your organization submit may be transmitted to those providers to produce that output.
We contractually require our model providers not to use the data we send them to train or improve their models.
Providers may retain that data for a limited period to detect abuse of their own services, then delete it. Under the agreements we hold today that period does not exceed 30 days, except where a provider flags content as a violation of its usage policy and holds it longer to investigate. We do not permit any other use.
A current list of our subprocessors, including model providers, is published at trust.marloai.com.
Output generated by the Service is probabilistic and may be inaccurate or incomplete. We do not use output to make decisions that produce legal or similarly significant effects about any individual.
How we use personal information
Service delivery and operations
- provide, maintain, and secure the Service;
- establish and maintain your account;
- send service-related announcements, updates, security alerts, and administrative messages;
- provide support and respond to your requests, questions, and feedback; and
- deliver professional services under a Statement of Work.
Improvement and analytics
We analyze usage of the Service to understand how it is used, diagnose problems, and develop new features.
We do not use customer content, brand context, or generated output to train our own machine learning models, and we do not permit our providers to do so.
Marketing
We send marketing communications about Marlo Labs to business contacts and may personalize them based on your role and interests. You can opt out at any time using the unsubscribe link in any marketing email or by contacting us. Opting out of marketing does not stop service-related messages.
Compliance and protection
- comply with applicable laws, lawful requests, and legal process;
- protect our rights, privacy, safety, or property, and those of others;
- audit our internal processes for compliance with legal, contractual, and policy requirements;
- enforce the terms that govern the Service; and
- prevent, investigate, and deter fraudulent, unauthorized, or illegal activity.
How we share personal information
- Service providers that perform services on our behalf, including cloud hosting and storage, model providers, email delivery, analytics, customer support, and security tooling.
- Our customers, where you are a user under that customer's account.
- Professional advisors, such as lawyers, auditors, insurers, and bankers.
- Authorities and others, where we believe in good faith it is necessary for the compliance and protection purposes described above.
- Business transferees, in connection with an actual or prospective investment, financing, merger, acquisition, sale of assets, or insolvency.
- Third parties you direct us to, including social and advertising platforms to which you instruct the Service to publish content on your behalf.
Retention
We retain personal information for as long as needed for the purposes described in this Privacy Policy, including to meet legal, accounting, audit, and reporting obligations, to establish or defend legal claims, and to prevent fraud. When we no longer need it, we delete, anonymize, or isolate it from further processing.
We retain records of privacy rights requests, including deletion requests, for 24 months after the request is completed. We keep that record even after deleting the underlying personal information, because it is our evidence that the request was handled.
Your choices
- Access or update your account information
If you hold a MarloAI account, you can review and update account information by signing in.
- Opt out of marketing
Use the unsubscribe link in any marketing email, or contact us using the details below.
- Cookies
Use the consent banner on marloai.com to change your cookie preferences at any time.
- Do Not Track
We do not currently respond to browser "Do Not Track" signals.
- Declining to provide information
We need certain information to provide the Service. If you do not provide information we identify as required, we may not be able to provide it.
Exercising your privacy rights
Submit requests to access, correct, or delete personal information, or to appeal a denied request, through our request form at marloai.com/privacy/data-request, or by email to [email protected].
We respond within 30 days of receiving your request. Where a request is complex or numerous, we may extend that period as permitted by law and will tell you before the initial period ends.
Verifying your identity
We verify identity before acting on a request. In most cases we do this by sending a confirmation message to the email address we hold for you and requiring a reply from that address, or by confirming that the request comes from a signed-in account. Where the request concerns sensitive information or the risk of wrongful disclosure is higher, we may ask for additional verification permitted by law. If we cannot verify your identity after reasonable effort, we will decline the request and tell you why.
Authorized agents
You may use an authorized agent where applicable law allows. We may require a copy of a valid power of attorney, or written and signed permission from you, and may separately verify your identity.
You are entitled to exercise these rights free from discrimination.
State privacy rights notice
This section applies to residents of U.S. states with privacy laws applicable to us. Not all rights are available to all residents, and some requests may be declined where the law permits. Requests about information we hold on behalf of a customer are governed by that customer's policy, not this one.
Subject to those limits, you may have the right to:
- know the categories of personal information we collect, the sources, the purposes, and the categories of third parties we disclose it to;
- access a copy of the personal information we hold about you;
- correct inaccurate personal information;
- delete personal information we collected from you;
- appeal our denial of a request; and
- opt out of sale, sharing, targeted advertising, and certain profiling.
Sale of personal information. We do not sell personal information within the meaning of state privacy laws.
Targeted advertising. We do not process personal information for targeted advertising purposes.
Profiling and automated decision-making. We do not use personal information for profiling or automated decision-making that produces legal or similarly significant effects.
Sensitive personal information. We do not intentionally collect or process sensitive personal information.
Minors. The Service is a business product intended for use by people 18 and over. We do not knowingly collect, sell, or share the personal information of anyone under 18.