Markup Studio

1. Who we are

Markup Studio is a sole proprietorship (eenmanszaak) of Mark Saado, based in the Netherlands, registered with the Netherlands Chamber of Commerce (KVK) under number 99547171. Contact: info@markupstudio.app.

For the data of our account holders we are the controller. For the data of visitors to our customers' websites, the customer (the website owner) is the controller and we act as their processor — see section 6.

2. Data we collect about account holders

Account data: your name, email address and password (stored only as a secure hash).
Subscription and billing data: plan, add-ons, subscription status and payment references. Payments are handled by Stripe; we never receive or store your full card details.
Website content: pages, texts, images, videos, blog posts, settings and domain names you add to the platform.
AI composer input: the business description and prompts you enter when you use the AI features.
Communication: emails you send us and our replies, including the daily summary and monthly report emails you can switch off.
Technical data: IP address, browser type and timestamps in server logs, used to keep the platform secure and working.

3. Why we use it and on what legal basis

To provide the platform, host your websites and manage your account — performance of our contract with you.
To bill your subscription and keep financial records — performance of the contract and our legal (tax) obligations.
To send service messages such as security notices, billing information and the daily summary — performance of the contract.
To prevent abuse, fraud and attacks, and to fix errors — our legitimate interest in a secure, reliable service.
To improve the platform based on how it is used — our legitimate interest.
To send newsletters or promotions — only with your consent, which you can withdraw at any time.

4. Who we share data with

We do not sell personal data. We use the following service providers (processors), each only for its own task:

Stripe — payments and subscriptions.
Namecheap — server hosting of the platform and the websites.
Bunny.net — video storage and streaming.
Resend — delivery of emails, including form messages to website owners.
Google (Gemini) and, as a fallback, OpenAI — generating content when you use the AI composer. Only the text you enter is sent.
Unsplash — finding stock photos for AI-generated pages. Only search terms are sent, no personal data.

5. Transfers outside the European Economic Area

Some providers are based in, or may process data in, countries outside the EEA (such as the United States). In those cases the transfer is covered by the EU-U.S. Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

6. Visitors to websites built with Markup Studio

Each website on the platform belongs to its owner, who decides what is collected and is responsible for it. We process visitor data only on the owner's behalf and only to provide the service:

Form messages are emailed to the website's receiver and, unless the owner switches this off, stored encrypted in the owner's Inbox. Stored messages are deleted automatically after the retention period the owner chooses (3 to 24 months).
Visitor statistics are counted without cookies and without storing IP addresses; only daily totals per page and traffic source are kept, for about 13 months.
Analytics or advertising trackers (such as Google Analytics or Meta Pixel) only run when the owner adds them, and only after the visitor accepts the cookie banner.
Every form links to the website's privacy policy. Questions about a specific website should go to its owner; we will forward requests we receive.

7. How long we keep data

Account and website data: as long as your account is active. When your account or a website is deleted (you can ask us by email at any time), we delete the related data within 30 days, unless the law requires us to keep it longer.
Billing records: 7 years, as required by Dutch tax law.
Server logs: for a limited period, only as long as needed for security and troubleshooting.
Form messages and visitor statistics: as described in section 6.

8. Cookies on markupstudio.app

Our own site uses only strictly necessary cookies: to keep you signed in and to remember basic settings. We do not use advertising or analytics cookies on markupstudio.app, so no cookie banner is needed there.

9. Security

All traffic is encrypted with HTTPS, passwords are stored as secure hashes, form messages are encrypted at rest, and access to our systems is limited to what is necessary. If a data breach affects you, we will inform you and, where required, the Dutch Data Protection Authority without undue delay.

10. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. Most of your data can be viewed and changed in your dashboard; for anything else, email info@markupstudio.app. We respond within one month.

You also have the right to lodge a complaint with a data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

11. Children

The platform is not intended for children under 16, and we do not knowingly collect their data.

12. Changes to this policy

We may update this policy when our service or the law changes. The date at the top shows the latest version; we will email account holders about important changes.

13. Contact

Questions or requests about privacy: info@markupstudio.app.