Privacy Policy

Effective date: October 5, 2026

This Privacy Policy explains how Marketercore Ltd ("we", "us" or "our") collects, uses, shares and protects personal information when you use Marketercore, including our web application, mobile app, websites, booking pages, chat widgets, phone numbers, AI agents and related services (together, the "Service"). It also explains the choices and rights you have.

Marketercore is a business tool. Businesses ("Customers") use it to manage their own customers, leads and contacts. That means we handle two different kinds of personal information, and our responsibilities differ for each. Please read the section on our role carefully.

1. Our role: controller and processor

When we act as a controller. We decide how and why personal information is used for the account holders and team members who sign up for and use the Service, for visitors to our own websites, and for people who contact us directly. For that information, this Privacy Policy governs.

When we act as a processor. When a Customer uploads, imports or collects information about its own customers and contacts (for example, through a form, a phone call, a text message, a chat widget or an integration), the Customer is the controller of that information and we process it on the Customer's behalf and according to its instructions. If you are a contact of one of our Customers and have questions about how your information is used, please contact that business directly. We will assist our Customers in responding to your request.

2. Information we collect

Account information. When you create an account we collect your name, email address, phone number, business name, password (stored only as a secure hash), role, preferences and branding settings. If you enable multi-factor authentication, we store the secret needed to verify your codes in encrypted form.

Customer and contact data. On behalf of Customers, we store the information they add to the Service, such as contact names, email addresses, phone numbers, addresses, notes, tags, deals, appointments, invoices, documents and signatures, form submissions and reviews.

Calls, recordings and transcripts. When calls are placed or received through the Service, we process call details such as phone numbers, time and duration. If a Customer enables call recording or an AI voice agent, we process and store audio recordings and generate written transcripts and summaries.

Messages. We process the content and metadata of SMS and MMS messages, emails, website chat conversations and social media messages sent or received through the Service.

Payment information. Payments for subscriptions and payments that Customers collect from their own customers are handled by our payment processor, Stripe. Card numbers are entered directly into Stripe's secure systems and are never stored by us. We receive limited information such as the card brand, last four digits, expiry date, billing details and transaction status.

Usage data and cookies. We collect information about how the Service is used, such as pages viewed, features used, log data, IP address, browser type and referring pages. We use cookies and similar technologies that are necessary to keep you signed in, keep the Service secure and remember your preferences. Where required by law, we ask for consent before using non-essential cookies.

Mobile device data. If you use our mobile app, we may collect device type, operating system version, app version, crash reports and a push notification token so we can deliver notifications you have enabled.

Location data. We only collect precise location if you use a feature that needs it, such as point of sale, and only after you grant permission on your device. You can withdraw that permission at any time in your device settings. We may infer an approximate location from your IP address for security and fraud prevention.

Information from integrations. If you connect a third-party service (for example, a CRM, email marketing tool, calendar, accounting or payment provider), we receive the information you authorize that service to share with us.

Connected social media accounts, including TikTok. You can connect your own social media accounts (such as TikTok, Facebook, Instagram, LinkedIn, X, Pinterest, Threads and YouTube) so the Service can publish the posts and videos you create and approve. When you connect TikTok, you sign in on TikTok's own page and choose which permissions to grant. We then receive:

• your TikTok account's display name, avatar and account identifier (the user.info.basic permission), which we use only to show you which account is connected;
• permission to upload and publish videos and photo posts to that account (the video.upload and video.publish permissions), which we use only to post content you have created or approved in the Service, at the time you schedule it;
• access and refresh tokens, which we store encrypted and use only to perform the actions above.

We do not read your TikTok messages, followers, comments or other videos, and we do not use TikTok data for advertising, sell it, or use it to train AI models. Content we post to TikTok is labelled as AI-generated where it was made with AI tools. You can disconnect TikTok at any time on the Integrations page, or in the TikTok app under Settings and privacy, Security, Manage app permissions. Disconnecting revokes our access, and we delete the stored tokens. Your use of TikTok is also subject to TikTok's own Terms of Service and Privacy Policy.

3. How we use information

We use personal information to:

• provide, operate and maintain the Service, including sending and receiving messages and calls on Customers' behalf;
• create and secure accounts, authenticate users and prevent fraud, spam and abuse;
• process payments, send invoices and manage subscriptions;
• provide customer support and respond to requests;
• send service announcements, security alerts and administrative messages;
• understand how the Service is used so we can fix problems and improve features;
• comply with legal obligations and enforce our Terms of Service.

Where the law requires a legal basis for processing, we rely on performance of a contract, our legitimate interests (such as securing and improving the Service), compliance with legal obligations, and your consent where it is required. We use Customer and contact data only to provide the Service to the Customer and as the Customer instructs.

4. Artificial intelligence features

The Service includes AI features, such as AI chat and voice agents that answer calls and messages, reply suggestions, call summaries and content generation. When these features are enabled, the relevant messages, call audio, transcripts and business information are processed by AI models to generate responses and outputs.

We use AI providers under terms that prohibit using your data to train their models. We do not use Customer contact data to train general-purpose AI models. AI output can be inaccurate, and Customers are responsible for reviewing it and for how they configure and use AI agents.

5. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as described below:

• Service providers (subprocessors) that help us run the Service, in the following categories: cloud hosting and storage, telephony and SMS carriers, email delivery, payment processing, AI and speech-recognition providers, error monitoring and customer support tools. They may use information only to provide services to us.
• Integrations you choose to connect, which receive the information you instruct us to send.
• The Customer that controls an account, including its authorized team members and, where applicable, the agency that provides the Service to that Customer.
• Legal and safety reasons, when we believe in good faith that disclosure is required by law or needed to protect the rights, property or safety of our users, the public or us.
• Business transfers, such as a merger, acquisition or sale of assets, subject to this Privacy Policy.

A current list of subprocessors is available on request from info@marketercore.co.uk.

6. SMS, calls and consent

Customers use the Service to send text messages and make calls to their own contacts. Each Customer is responsible for obtaining and documenting any consent required by law before messaging or calling someone, including under the U.S. Telephone Consumer Protection Act (TCPA), carrier and A2P 10DLC rules, CAN-SPAM, Canada's CASL and similar laws. Customers are also responsible for giving any notice and obtaining any consent required before recording calls, including in jurisdictions that require the consent of all parties.

If you receive a text message sent through the Service, you can reply STOP at any time to opt out of further messages from that sender, and HELP for help.

7. Data retention

We keep account information for as long as the account is active and for a reasonable period afterwards to comply with legal, tax and accounting obligations, resolve disputes and enforce our agreements. Customer data, including recordings and transcripts, is kept for as long as the Customer keeps it in the Service or as the Customer configures. After an account is closed, we delete or anonymize Customer data within a reasonable period, except where we must keep it by law. Backups are overwritten on a rolling schedule.

8. Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest, hashed passwords, multi-factor authentication, role-based access controls and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Our Privacy and Security page describes these practices in more detail.

9. International transfers

We and our service providers may process information in countries other than the one where you live, which may have different data protection laws. When we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate or incomplete information;
• delete your information;
• restrict or object to certain processing;
• receive your information in a portable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your local data protection authority.

EEA and UK residents. You have the rights above under the GDPR and the UK GDPR.

California residents. Under the CCPA as amended by the CPRA, you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use sensitive personal information for purposes that would require offering a right to limit. We will not discriminate against you for exercising your rights. You may use an authorized agent to make a request on your behalf.

To exercise your rights, contact info@marketercore.co.uk. We will verify your request and respond within the time required by law. If your information was provided to us by one of our Customers, we may refer your request to that Customer, since it controls that information.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify account holders by email or through the Service before the changes take effect. The effective date at the top shows when it was last updated.

13. Contact us

If you have questions about this Privacy Policy or our privacy practices, please get in touch. You can contact Marketercore Ltd by email at support@marketercore.co.uk. Our postal address is: 128 City Road, London EC1V 2NX. Company number: 13420440. You can also find more information on marketercore.co.uk.