Privacy Policy | MarkBudget

1. Who We Are

Nexodule Services LLC is the legal entity that operates MarkBudget. Our registered address is in the State of Wyoming, United States. For any privacy-related questions or requests, contact us at info@markbudget.com.

2. Data We Collect

We collect only what is necessary to operate the Service:

—Email address — collected at signup and used for authentication, account recovery, and team invitations. We do not collect your name, phone number, or any additional personal identifiers.
—Company and budget data — your company name, base currency, budget hierarchy (brand, category, subcategory, and line item names), budget values, and financial settings. This data belongs to your company workspace.
—Transaction data — committed and actual spend entries, including vendor names, descriptions, invoice numbers, amounts, currencies, and dates. This data is entered by you and is scoped to your company workspace.
—Collaborative data — comments, cell-specific annotations, and team mentions you add to the budget grid. This data belongs to your company workspace.
—Team data — when an admin invites a team member, we store the invited email address, their assigned role, and an invite token.
—Anonymous usage data — we use Vercel Analytics to measure page views. This collects the page URL, referrer, device type, and country. It does not use cookies, does not fingerprint users, and is not linked to your identity.

3. How We Use Your Data

—Providing and operating the MarkBudget platform
—Sending account confirmation and password reset emails (via our authentication provider)
—Sending team invitation emails when an admin invites a new member
—Sending notification emails when you are @mentioned in a comment and are not currently online
—Improving the platform using anonymous, aggregated usage analytics
—Processing subscription payments through Paddle (see Section 6)

We do not sell your personal data. We do not send marketing or promotional emails. We do not use your financial data for any purpose outside of operating the Service.

4. Third-Party Services

We use the following third-party services to operate MarkBudget:

Supabase

Database and user authentication. Data is stored on AWS infrastructure in the EU (Ireland, eu-west-1). Supabase operates as our data processor under a Data Processing Agreement.

Vercel

Application hosting and anonymous page-view analytics. No personal data is collected by Vercel Analytics.

Resend

Transactional email delivery for team invitations and @mention notification emails.

Paddle

Payment processing and subscription management. Paddle is an independent data controller acting as Merchant of Record. We do not receive or store your payment card details. Paddle's Privacy Policy governs their data practices.

5. Data Ownership & Retention

All financial and budget data in MarkBudget belongs to the company workspace, not to individual team members. The company is created by the account Admin.

—When a team member leaves or is removed: their access is revoked immediately. Any data they contributed (budget entries, transactions) remains part of the company workspace and is retained as company property.
—When the company Admin cancels the subscription: canceling via the app stops future billing and downgrades the workspace to read-only at the end of the billing cycle, but it does not delete company data.
—When the company Admin deletes their account: all company-related data is permanently and immediately deleted from our systems — including the hierarchy, budget values, transaction entries, share links, and team records. This action is irreversible.
—We retain data only for as long as the company workspace is active. No minimum retention period applies to this type of data under applicable law.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

—Access: request a copy of the personal data we hold about you
—Correction: request correction of inaccurate data
—Deletion: request deletion of your personal data. Company Admins can delete all company data by deleting their account. You may also email us to request manual deletion.
—Data portability: your budget data can be exported at any time using our built-in Excel export feature

To exercise any of these rights, email info@markbudget.com.

7. Cookies

—Authentication cookie: Supabase sets a strictly necessary session cookie to keep you logged in. This cookie is required for the Service to function and does not require consent under applicable law.
—Analytics: Vercel Analytics does not use cookies or any persistent tracking mechanism.
—We do not use advertising cookies, third-party tracking cookies, or any cookie-based behavioral analytics.

8. Security

—All data stored in Supabase is protected by Row-Level Security policies — users can only access data belonging to their own company workspace
—All connections are encrypted using TLS/HTTPS
—We never store payment card details — all payment processing is handled by Paddle

9. Minimum Age

MarkBudget is intended for users who are 18 years of age or older. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at info@markbudget.com and we will delete it promptly.

10. International Data Transfers

Your data is stored on servers located in the European Union (Ireland).

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you via email or an in-app notice.

12. Contact

For any privacy-related questions, requests, or concerns, contact us at:
info@markbudget.com
Nexodule Services LLC, Wyoming, USA

Privacy Policy.