Privacy Policy

This policy applies to Marlin's website, dashboard, APIs, and the JavaScript widget that merchants embed on their sites. If you interact with Marlin as an end user on a third-party website, that site's operator is responsible for telling you how your data is collected and processed. Marlin processes that interaction data on behalf of the site operator.

Account information. When you sign up or sign in, we collect information such as your name, email address, and profile details from your authentication provider (for example, GitHub or Google), if you choose to use those sign-in methods.

Project and configuration data. We store project names, settings, API/project keys, and related dashboard activity needed to operate your account.

Voice interaction data. When someone uses the Marlin widget, we may process voice audio, speech-to-text transcripts, page accessibility context (such as button labels, form fields, and links on the page), on-demand page snapshots when the assistant needs visual context, and session metadata such as timestamps, duration, and interaction logs.

Technical and usage data. We collect standard log and device information, including IP address, browser type, and pages visited, as well as cookies and similar technologies needed for authentication and security.

We use personal information to:

• Provide, operate, and secure the Marlin service
• Authenticate users and manage accounts and projects
• Process voice sessions and deliver assistant responses
• Troubleshoot issues, monitor performance, and improve the product
• Communicate with you about your account, updates, and support requests
• Comply with legal obligations and enforce our terms

We do not use your data to train third-party AI models. Voice and session data is processed to run your sessions and provide the service.

We do not sell your personal information. We share information only as needed to operate Marlin:

• Service providers such as OpenAI (voice and AI processing), Supabase (data storage and authentication infrastructure), and Vercel (hosting)
• Legal and safety when required by law or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, or sale of assets

Each provider is permitted to process data only as needed to perform services for us and is required to protect it appropriately.

If you install the Marlin widget on your website, you are responsible for providing clear notice to your visitors and obtaining any consent required before voice capture and processing begins. You must use Marlin in compliance with applicable privacy and recording laws.

We retain personal information for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account data by contacting us. Some information may be retained in backups or logs for a limited period afterward.

We use technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Marlin is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will take steps to delete it.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, or to object to certain processing. You can update some account information in your dashboard. For other requests, email us at support@onmarlin.com.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may be communicated through the service or by email where appropriate.

Indexia Inc. (Marlin)
Email: support@onmarlin.com

See also our Terms of Service.