Privacy policy
Your data, handled with care.
The short version:
- Marc reads your Gmail and Google Calendar read-only. It never sends, deletes or changes anything.
- For your daily brief and alerts Marc reads only the sender, recipients, subject, date and a short preview. Marc opens a full email, and any PDFs attached to it, only when you ask about that email, uses it to answer you, and does not store it. There are exceptions, where Marc opens an email without being asked, to read only what it needs: calendar invites; recaps from your meeting notetaker; and your latest thread with someone just before you meet them. These emails aren't stored. What Marc tells you from them is kept in your chat, and they pass through our AI provider to be read.
- We never sell your data, show you ads, or use it to train general AI models.
- Text delete my data to Marc on WhatsApp and everything is erased, and Google access is revoked. Text log out to revoke every connection and stop Marc while keeping your history for when you return.
1. Who we are
Marc is an AI chief of staff for startup founders, offered by Ask Marcos, a sole proprietorship based in Mumbai, Maharashtra, India ("we", "us"). This policy covers askmarcos.in, app.askmarcos.in and Marc on WhatsApp.
2. What we collect
| Source | What we access |
|---|---|
| Google account | Your name and email address, to sign you in. If you add more Google accounts, Marc reads each one the same way, and you can remove them anytime. |
| Gmail (read-only) | For recent emails, including emails you sent in the last 21 days so Marc can flag anyone who hasn't replied: sender, recipients, subject, date, labels and a preview of up to 300 characters. Emails that carry a calendar invite, opened to read the invite. When you ask Marc about a specific email, its full text and attached PDFs, read once to answer you and never stored. If you ask Marc to send you a file attached to one of your emails, Marc fetches that file and passes it to Meta to deliver to your own WhatsApp. Marc keeps only the file's name, not the file. |
| Google Calendar (read-only) | Your events: title, time, attendees, and up to 300 characters of the description. Your calendar's time zone. Marc also reads calendar invites in your Gmail, so a meeting that hasn't reached your calendar isn't missed. |
| Outlook (read-only), if you connect it | The same as for Gmail and Google Calendar: for recent emails, the sender, subject, date and a preview of up to 300 characters; for events, the title, time, attendees and up to 300 characters of the description. Microsoft asks your permission on its own sign-in screen. |
| Other apps you choose to connect (read-only) | Only if you connect them, for example Linear, Todoist, Granola or Notion: the items Marc needs for your brief, such as tasks due today, issues assigned to you and recent meeting notes. Each app asks your permission on its own sign-in screen, and you can disconnect any of them. Marc connects to them directly, and their access tokens are encrypted like your Google token. |
| Bills, only if you text burn on | Emails that look like bills, receipts or invoices, read once. We keep the vendor, amount, currency, billing cycle and dates, never the email. Text burn off to stop and delete them. |
| Promises from your email | Short notes of commitments Marc spots in email previews, in both directions, such as "Send Rohan the deck, due Friday": who, what and the due date. Each note is deleted once the email shows it was kept, a while after it lapses, or when you delete your data. |
| Your phone number, the messages you send Marc, and the messages Marc sends you. Voice notes are transcribed, meeting recordings you share are written up as notes, and images and PDFs are read by Google Gemini to answer you: we keep the transcript or notes and the file name, never the audio, image or file itself. If you record a meeting, you're responsible for telling the other people in it. Reminders you ask for are kept until they are sent. | |
| Onboarding conversation | The transcript of your voice or typed onboarding, and the profile built from it: your priorities, key people, preferences and working style. We do not keep audio recordings of the call. |
| Waitlist form | The name, email, phone, company and stage you enter on askmarcos.in. |
| Website | Anonymous page-view counts (Vercel Web Analytics, no cookies). |
3. How we use it
Only to provide Marc to you: to choose and explain the things that matter in your day, prepare you for meetings, track commitments, and answer you on WhatsApp. We also use it to keep the service secure and to fix problems. We do not use it for advertising, we do not sell it, and we do not use it to train generalised AI models.
4. Google user data
Marc's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Gmail and Calendar data only to provide and improve Marc's user-facing features for you.
- We do not transfer it to others except as needed to provide those features (the service providers in section 6), to comply with law, or as part of a merger or acquisition with notice to you.
- We do not use it for advertising, and we do not sell it.
- No person at Ask Marcos reads it, unless you ask us to (for example, to fix a problem with your brief), it is needed for security or abuse investigations, or the law requires it.
5. AI processing
To decide what matters, Marc sends the relevant parts of your data (such as email previews and calendar events) to an AI model provider, currently Google Gemini. During voice calls, your speech is transcribed by Sarvam AI and Marc's replies are spoken by Cartesia. For founders' data we use paid API plans under which these providers do not use it to train their models. AI can make mistakes: Marc's suggestions are prompts for your judgement, not instructions.
6. Who processes data for us
| Provider | Purpose |
|---|---|
| Sign-in, Gmail and Calendar access, Gemini AI | |
| Microsoft | Outlook mail and calendar access, if you connect Outlook |
| Meta (WhatsApp Business Platform) | Sending and receiving WhatsApp messages, including files you ask Marc to send you |
| Supabase | Database (hosted in India, AWS Mumbai) |
| Railway | Servers that run Marc |
| GitHub | Encrypted backups of our database, kept for 30 days |
| Sentry | Error reports, so we can fix problems quickly. They say where something broke, never what's in your mail, calendar or messages. |
| Vercel | Hosting askmarcos.in |
| Sarvam AI | Speech-to-text during voice calls |
| Cartesia | Marc's voice during calls |
| Vapi | Backup voice-call provider |
| Google Sheets | Waitlist sign-ups |
Some providers process data outside India. Each is bound by its own terms and data protection commitments.
7. Security
- Google access is read-only, and your Google token and other apps' tokens are encrypted at rest.
- All traffic is encrypted in transit (HTTPS/TLS).
- Our database is not reachable through public APIs, and access is limited to Marc's servers and its backup job.
More detail is on our Security page.
No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
8. How long we keep it
We keep your data while your account is active. Email previews are used to build your brief and are not kept beyond what the brief itself shows and the view of your day that Marc keeps ready, which is refreshed through the day. When you text delete my data on WhatsApp, or email us, we delete your account, profile, briefs, messages and transcripts, revoke Marc's Google access, and disconnect every other app you connected. Copies in encrypted backups are deleted within 30 days. You can also revoke access at any time from your Google Account under Security, Third-party connections.
9. Your rights
Under India's Digital Personal Data Protection Act, 2023, and similar laws where you live, you can ask to access, correct or erase your personal data, withdraw consent, and raise a grievance. Withdrawing consent stops Marc's service for you. Email us and we will respond within 30 days.
10. Children
Marc is for founders and professionals aged 18 or over. We do not knowingly collect data from anyone younger.
11. Changes
If we change this policy in a meaningful way, we will tell you on WhatsApp or by email before the change takes effect.
12. Contact and grievance officer
Aarav Jhawar, Ask Marcos, Mumbai, India
aaravjhawar578@gmail.com