Privacy Policy
Last updated 19 July 2026. Fidget Labs BV, Breda, Netherlands, is the data controller.
What we collect
- From LinkedIn sign-in: your name, email address and profile picture. LinkedIn’s standard sign-in does not give us your profile URL, so we ask you for it directly if you want it shown on your author page.
- What you write on Markwright, and the metadata that goes with it.
- Payment records if you top up your wallet. Card details go straight to Stripe and never touch our servers.
- Minimal server logs for operations and abuse prevention.
- Analytics about how the site is used, described under Cookies and analytics below.
What we do not collect
- Your LinkedIn connections, feed, or messages.
- Anything that would let us post to LinkedIn on your behalf.
- Special category data. Please do not send us any.
How we use it
To run the platform, publish your work to readers and AI crawlers, process payments, answer support questions, and comply with legal obligations. We do not sell personal data. Our legal bases are performance of our contract with you for running your account, legitimate interest for security and product analytics, and consent where the law requires it.
Who we share it with
Operational providers: Supabase (database and authentication, hosted in the EU), Vercel (hosting and platform analytics), Stripe (payments), Google Analytics (site analytics), Anthropic and Perplexity (the AI features that analyse your drafts and check whether answer engines cite you). Each is bound to handle your data only for the purposes of serving the platform. Some of these providers are based in the United States, and those transfers rely on Standard Contractual Clauses.
Anything you publish is public by design and is served to third-party AI crawlers. We cannot control what those systems do with content they have already fetched.
Retention
Profile and post data is retained while your account is active and for thirty days after you request deletion, after which it is permanently erased. Payment records are kept for seven years because Dutch tax law requires it. Server logs are kept for ninety days.
Your rights
You have the right to access, correct, export, delete, restrict and object to the processing of your personal data, and to complain to your supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens.
You can delete your account yourself from your dashboard settings. For access, correction or an export of your data, email privacy@markwright.app and we will respond within thirty days. Self-serve export is on the roadmap and is not available yet.
Cookies and analytics
We set essential cookies for session authentication. We also run Google Analytics, which sets its own cookies and gives us aggregate traffic statistics, and Vercel analytics, which is cookieless. We do not run advertising cookies and we do not sell or share data for advertising.
If you would rather not be measured, Google Analytics respects browser opt-out extensions, and blocking third-party cookies is enough to stop it. Nothing about the product depends on analytics being on.
Changes
Material changes to this policy will be announced via email to account holders at least thirty days before they take effect.