PRIVACY POLICY

The data controller for personal information collected through this website and our services is:

If you are located in the European Union or the United Kingdom, your data is handled in accordance with GDPR and UK GDPR respectively. If you are located in Canada, your data is handled in accordance with PIPEDA (Personal Information Protection and Electronic Documents Act) and applicable provincial privacy legislation.

When you browse this website, we collect minimal technical data to keep the site functioning:

• —Server logs: IP address, browser type, pages visited, and timestamps. These are standard logs kept by web servers. They are not tied to your identity and are retained for up to 30 days for security purposes only.
• —Cookies: We use a minimal number of functional cookies required for the site to operate correctly. No advertising or tracking cookies are used. See our Cookie Policy for full details.

We do not use Google Analytics, Facebook Pixel, or any third-party behavioural tracking tools on this website. We do not build advertising profiles. We do not sell or share visitor data with any third party.

When you submit a contact form, assessment request, or email us directly, we collect the information you provide, which typically includes:

• —Your name and business name
• —Your email address and phone number (if provided)
• —Your message, project description, or document(s) submitted for assessment
• —Your industry and location (if you choose to share these)

Purpose: This information is used solely to respond to your enquiry, conduct the requested assessment, and, if you engage us, to manage your project. We do not add you to marketing lists without your explicit consent.

Retention: Enquiry data from contacts who do not become clients is retained for up to 12 months and then securely deleted. Project-related communications with clients are retained for up to 3 years for contractual and legal compliance purposes.

Specifically:

• ✓Your blueprints, RFI logs, daily reports, trade documents, and freight invoices are processed locally on our build hardware.
• ✓No document content is transmitted to OpenAI, Anthropic, Google, AWS, or any other cloud provider in the course of building your system.
• ✓Upon delivery of your project, all copies of your documents held by Marapone are permanently deleted from our systems.
• ✓The AI system we deliver to you runs on your own hardware. From that point forward, your data never touches Marapone's infrastructure.

If we engage an NDA prior to receiving your materials (which we recommend for sensitive projects), those obligations apply in addition to and independently of this Privacy Policy.

We do not sell personal data. We do not share personal data with advertising networks, data brokers, or marketing platforms.

In limited circumstances, we may share data with:

• —Payment processors: When you pay an invoice, your payment details are handled by your chosen payment provider (e.g., your bank, PayPal, or card network). Marapone does not store card numbers or banking credentials.
• —Email and communication providers: Standard email services are used to communicate with clients. Email content related to your project is treated as confidential.
• —Legal or regulatory authorities: If required by law or court order, we may disclose information to the relevant authorities. We will notify you to the extent permitted by law if such a request is received.

Depending on your location, you may have the following rights regarding personal data we hold about you:

To exercise any of these rights, email general@marapone.com. We will respond within 30 days. We do not charge a fee for reasonable requests.

We take reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. Our development hardware is physically secured, access-controlled, and not exposed to public networks during client builds.

No method of transmission or storage is 100% secure. If a data breach occurs that is likely to result in risk to your rights, we will notify you and relevant supervisory authorities within the timeframes required by applicable law.

Marapone operates from Canada and Italy. If you are located in the European Economic Area (EEA) or the United Kingdom and we process your personal data, that data may be transferred to and processed in Canada. Canada is recognised by the European Commission as providing an adequate level of data protection for commercial organisations under PIPEDA.

We do not transfer client document data internationally. Project documents are processed on local hardware in whichever office is managing your build, and deleted upon project delivery.

We may update this Privacy Policy as our services evolve or legal requirements change. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to active clients by email.