Privacy policy

1. Who we are

Markindex.io is the data controller for all personal data processed through this website and application. We operate the Markindex platform — a market intelligence tool that helps marketing managers benchmark their ad account performance against the market.

Contact: privacy@markindex.io

2. What data we collect

Account and profile data

When you sign up, we collect your name and email address. If you use Google sign-in, these are provided by Google with your permission. We also store your chosen industry classification (ecommerce or B2B SaaS) and your business name.

Team member data

If you invite colleagues to your Markindex business, we store their names and email addresses for the purpose of granting them access.

Ad account data (via Meta API)

When you connect a Meta ad account, we retrieve and store campaign names, ad set names, ad names, campaign objectives, budget allocations, ad formats, performance metrics (such as click-through rate, cost per click, cost per acquisition, return on ad spend, and impressions), and account change history. We do not store ad creative content, audience personal data, or any data beyond what is required to provide benchmarks and insights.

Campaign and ad names may contain business-identifying information (e.g. brand names or product names) that you or your team have entered. This data is stored only for the purpose of displaying your account structure back to you. It is never shared with other users and is not included in anonymised benchmark pools.

Anonymised benchmark data

For free and pro users, we derive fully anonymised, aggregated metrics from connected ad accounts to power the Markindex benchmark pool. No brand names, ad content, or identifying information is included. Enterprise users are excluded from the benchmark pool entirely — their data contributes nothing to aggregates.

Payment data

Payments are processed by Stripe. We never see or store your full card details. Stripe returns a customer ID and subscription status, which we store to manage your access tier.

Usage and analytics data

Subject to your cookie consent, we collect data about how you use the platform — pages visited, features used, clicks, and session duration. This is used to improve the product.

Technical data

We may collect your IP address, browser type, device type, and referring URL for security, fraud prevention, and basic analytics purposes.

3. How we use your data

• To provide and operate the Markindex platform and all its features
• To calculate benchmarks and generate insights for your ad accounts
• To manage your subscription and billing through Stripe
• To send transactional emails such as trial reminders and payment receipts
• To allow team members you invite to access your business data
• To improve the product using aggregated, anonymised usage analytics
• To prevent fraud, abuse, and unauthorised access
• To comply with our legal obligations

We do not use your data to train AI or machine learning models. We do not sell your data. We do not use your ad account data for advertising or marketing to you or others.

4. Legal bases for processing

5. Cookies and tracking tools

We use a consent management platform (cookie banner) on our marketing site. Analytics and advertising cookies are not placed until you accept them. You can change your preferences at any time via the cookie settings link in the footer.

Essential cookies (authentication, session security) are placed without consent as they are strictly necessary to operate the service.

6. Data sharing and subprocessors

We share personal data only with the subprocessors listed below, solely for the purpose of operating Markindex. We do not sell data or share it with third parties for their own marketing or analytics purposes.

We may also disclose data to law enforcement or regulatory authorities if required by applicable law.

7. International data transfers

Several of our subprocessors are based in the United States. Where personal data is transferred outside the European Economic Area, we rely on the EU Standard Contractual Clauses (SCCs) or an EU adequacy decision to ensure an equivalent level of data protection.

8. Data retention

We keep your personal data for as long as your account is active or as necessary to provide the service. Specific retention rules:

• Account data — retained for the lifetime of your account. Permanently deleted when you delete your account.
• Ad account data — retained while the ad account is connected. Permanently deleted the moment you disconnect the account. No archive, no anonymised copy, no retention.
• Billing records — retained for 5 years as required by Danish bookkeeping law (Bogføringsloven).
• Anonymised benchmark data — derived from your data and retained indefinitely as aggregate statistics with no link to your account.

9. Our deletion commitment

When you delete your Markindex account, all data we hold about you is permanently and irreversibly deleted — including your user profile, any businesses you solely own, and all associated ad account data. There are no soft deletes, no dormant archives, and no "we might need it later" exceptions.

When you disconnect an ad account, all data tied to that account — campaigns, ad sets, ads, metrics, and activity history — is permanently deleted immediately. Not anonymised and kept. Deleted.

This is a core trust commitment, not a legal formality.

10. AI and machine learning

We do not use your personal data or ad account data to train, fine-tune, or evaluate any AI or machine learning model — whether operated by Markindex or a third party. Any AI-assisted features within Markindex use only the data you explicitly interact with in that session and are not used to build or improve models.

11. Your rights

Under GDPR you have the following rights. To exercise any of them, email privacy@markindex.io. We will respond within 30 days.

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data. You can also do this directly in account settings.
• Restriction — ask us to pause processing of your data while a dispute is resolved.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw consent for cookie-based tracking at any time via the cookie settings link in the footer.

12. Supervisory authority

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

We would, however, appreciate the opportunity to address any concerns directly before you contact the authority. Please reach out to privacy@markindex.io first.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify you by email or with a notice in the application. The date at the top of this page always reflects the latest version.