Privacy Policy

MKT4.ME is a marketing management application for ecommerce merchants. It helps merchants review store and advertising performance, generate content and creative drafts, and prepare campaign materials for review.

The service is operated by ASP SOFT DEVELOPMENT EOOD, established in Bulgaria.

• Legal name: ASP SOFT DEVELOPMENT EOOD
• Country of establishment: Bulgaria
• Website: https://mkt4.me
• Email: support@mkt4.me
• Commercial register number (EIK/UIC): not yet published — required before full public publication.
• Registered office / management address: not yet published — required before full public publication.
• Status: company identification for Bulgarian online-provider disclosure is incomplete.

This Privacy Policy describes how MKT4.ME processes information when you use the service (“MKT4.ME”, “we”, “us”). It is written to match current product behavior and is not a certification of GDPR compliance or of Meta/Shopify approval.

When a pilot account is created for you, we process account details such as name, email address, and a hashed password. Sessions are maintained with signed cookies. Password-reset and email-verification tokens, where used, are stored as hashes with expiry.

Public self-registration is disabled. Accounts are provisioned for approved pilot merchants by the operator.

When you submit the public pilot access form on the Contact page, we process the details you provide (such as name, business name, work email, optional store URL or domain, and your message) so we can review pilot interest and reply. Those submissions are emailed to our support inbox and are not stored as application database records by the form itself. Cloudflare Turnstile may process a bot-protection token as part of submission.

If you connect Shopify through OAuth, MKT4.ME may access store identity and commerce data according to the permissions you grant (currently including products, orders, and inventory scopes as configured for the app). We store encrypted OAuth credentials and synced commerce records needed to provide analytics and workflows.

You can disconnect Shopify from the Connections area when signed in. Disconnecting clears MKT4.ME’s stored Shopify access credentials for that workspace. Synced commerce records may remain until you request broader deletion or delete the workspace.

If you connect Meta through OAuth, MKT4.ME may access advertising account, campaign, ad set, ad, identity, and analytics data according to the permissions you grant. We store encrypted OAuth credentials and synced advertising data needed for analytics and campaign-preparation features.

Meta publishing, destination provisioning, and related write actions may be disabled by environment gates and are not generally available to every merchant. Disconnecting Meta clears stored Meta credentials for that workspace and removes Meta Platform Data held for the connection in MKT4.ME, including: the ad-account catalog and Page / Instagram identities discovered for the connection; cached campaign / ad set / ad trees and related insights; destination-provision and Meta write-audit records (send / start-pause / budget attempts); and merchant trust confirmation for the selected ad account and Page. Campaign draft copy and creative assets you authored in MKT4.ME are retained, with Meta linkage fields cleared and approval invalidated so the draft cannot be sent until Meta is reconnected and re-approved.

Marketing Brain runs and campaign-draft approval snapshots may still contain derived Meta metrics or Meta identity references after an ordinary Disconnect. A separate, verified full Meta data erasure (requested by email and fulfilled by the operator, or by a workspace owner with an explicit confirmation phrase) scrubs or removes that residual Meta-derived JSON while preserving merchant-authored draft copy, creatives, and Shopify commerce data. See Data Deletion. Disconnecting or erasing MKT4.ME-held Meta data does not delete your Meta Business, Ad Account, Page, or ads inside Meta’s products.

MKT4.ME uses AI features to help generate marketing insights, copy, and creative assets. Where configured, text and/or image generation may call external AI providers (currently OpenAI APIs when API keys are configured). Inputs may include product context, brand context, prompts, and related workspace content needed to produce the requested output.

When those providers are used, relevant request content is transmitted to them under their terms. AI outputs are drafts for merchant review and are not legal, compliance, or advertising advice.

We use the information above to:

• Operate your workspace and authenticate access.
• Provide analytics, insights, and recommendations.
• Generate AI-assisted content drafts and creative assets.
• Support campaign draft preparation and related workflows.
• Maintain integrations you authorize.
• Secure, operate, troubleshoot, and improve the service.
• Respond to support, privacy, and deletion requests.

Application data is stored in the databases and infrastructure used to run MKT4.ME (including hosting and PostgreSQL). OAuth access tokens are encrypted at the application layer before persistence.

We retain information for as long as needed to provide the service, maintain your workspace and integrations, meet operational needs, and handle requests you make. We do not publish fixed retention calendars in this policy. Backups and operational logs may persist for a period after deletion requests according to infrastructure practices; we do not claim instantaneous erasure from all backups.

• Disconnect Shopify and/or Meta from Connections when signed in.
• Workspace owners may delete the active workspace from Settings where that control is available (requires confirmation).
• Request deletion of MKT4.ME-held data by emailing support@mkt4.me — see Data Deletion.
• Shopify mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact) are verified and processed for the matching shop. See Data Deletion for current behavior. Order rows currently do not store customer email, phone, or postal addresses.

Shopify, Meta, OpenAI, Cloudflare (email routing), and hosting providers process data under their own terms. MKT4.ME does not control those platforms.

Privacy inquiries: support@mkt4.me

We may update this policy as the product evolves. The “Last updated” date will change when we do.

Unresolved items for human legal review include: formal GDPR Article 13/14 wording and lawful bases; appointment of a DPO if required; cross-border transfer mechanisms for AI/hosting providers; fixed retention schedules; and completion of Bulgarian company identification disclosures (EIK/UIC, registered office, telephone).