Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

MarketConsultive GmbH, Allgäuerstraße 35, 87719 Mindelheim, Germany. Managing Director: Abdullah Gül. Phone: +49 8261 7939101.

For privacy questions, please contact datenschutz@marketsolve.io. MarketSolve is a brand of MarketConsultive GmbH.

2. Scope: controller and processor

This policy covers data for which MarketConsultive GmbH is itself the controller: data of visitors to our website and data of our customers and their users (for example account, contract and billing data).

The data of our customers' end customers, such as orders, emails, support messages, reviews and contacts that a merchant processes through MarketSolve, is the responsibility of that merchant as controller. We process such data solely on the merchant's behalf and instructions as a processor under Article 28 GDPR. The details are set out in our Data Processing Agreement (DPA). End customers with questions about their data should contact the respective shop.

3. Visiting marketsolve.io

Hosting: Our website is hosted by Vercel Inc., USA, and served from the EU region Frankfurt (fra1). When you access the website, Vercel processes technically necessary data in server logs, in particular your IP address, date and time of access, the page requested, referrer URL, browser and operating system. This is required to deliver the website and keep it stable and secure.

The legal basis is our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). Log data is kept only as long as necessary for these purposes. We have concluded a data processing agreement with Vercel. Any transfer to the USA is based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.

No analytics, no tracking: We do not use analytics tools, marketing cookies or any tracking technologies on the website.

Fonts: All fonts are self-hosted. Visiting the website does not create a connection to Google or any other font provider.

4. Contacting us by email

If you contact us by email, we process the information you provide (for example name, email address, company and your message) to handle your request.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual steps, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). We delete the data once your request has been fully handled, unless statutory retention obligations apply.

4a. Waitlist

Before MarketSolve launches, you can join a waitlist on our website. We store your email address, optionally your store and the products you are interested in, as well as the chosen language, the page you signed up on, the time and the exact wording of your consent.

Purpose: we let you know when MarketSolve launches and, until then, at most about important news. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example by email to hallo@marketsolve.io.

The data is stored in our database at Supabase (Frankfurt region) and used only for this purpose. We delete it as soon as you withdraw consent, and at the latest six months after launch if you do not create an account.

5. Customer account and use of the applications

To use MarketSolve, you create an account at konto.marketsolve.io. In doing so and while using the service, we process in particular: name, business email address, company name and billing address, VAT ID, login and security data, booked products and plans, usage and billing data, and technical logs for troubleshooting and abuse prevention.

The legal basis is the performance of the contract or pre-contractual steps (Art. 6(1)(b) GDPR); for billing and record-keeping, compliance with legal obligations (Art. 6(1)(c) GDPR); and for security and abuse prevention, our legitimate interest (Art. 6(1)(f) GDPR).

We send you emails required for the contract, for example account confirmation, invoices, notices about the end of your trial, security matters and material changes to the service.

6. Cookies in the applications

After you log in, we set a strictly necessary session cookie that applies to all subdomains under *.marketsolve.io, so that you stay logged in when switching between your account and the individual products. The cookie contains no advertising or tracking information and becomes invalid when you log out or the session expires.

The legal basis is Section 25(2) No. 2 TDDDG (strictly necessary to provide the service you requested) in conjunction with Art. 6(1)(b) GDPR. No consent is required.

7. Service providers

We use the following service providers to operate MarketSolve. Data processing agreements under Article 28 GDPR are in place with all processors. Transfers to countries outside the EU/EEA are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where the provider is certified, the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

• Vercel Inc. (USA): hosting of the website and applications, region Frankfurt (fra1).
• Supabase: database and authentication (login), region EU (Frankfurt).
• Stripe: payment processing and subscription management. Payment details (such as card data) are collected directly by Stripe; we do not receive them. For certain data, for example for fraud prevention and its own regulatory obligations, Stripe acts as an independent controller.
• Amazon Web Services (AWS) Simple Email Service: sending emails, region eu-central-1 (Frankfurt).
• Postmark (ActiveCampaign LLC, USA): receiving and sending support emails; transfer to the USA based on Standard Contractual Clauses.
• Anthropic PBC (USA): generating AI reply drafts; transfer based on Standard Contractual Clauses. Data submitted via the API is not used by Anthropic to train AI models.
• OpenAI (USA): computing embeddings for knowledge search; transfer based on Standard Contractual Clauses.

8. Shopify

Customers can connect their Shopify store to MarketSolve. We then retrieve the data needed for the booked products via the Shopify API (for example store information, orders and customer data). The merchant establishes this connection and can disconnect it at any time. End-customer data is processed on the merchant's behalf (see section 2 and the DPA).

9. Retention

We keep personal data only as long as necessary for the respective purpose. Account data is deleted after the contract ends; customers can export their data for 30 days after the end of the contract, after which it is deleted. Data subject to statutory retention obligations (in particular invoices and accounting records under the German Commercial Code and Fiscal Code, up to ten years) is retained until those periods expire and is restricted from any other use.

10. Your rights

Under the GDPR, you have the following rights:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests, on grounds relating to your particular situation (Art. 21 GDPR)
• Lodging a complaint with a supervisory authority (Art. 77 GDPR). The authority competent for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

11. Obligation to provide data

You do not need to actively provide any personal data to visit the website. To use MarketSolve, the data requested during sign-up is required; without it we cannot enter into a contract.

12. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR. AI reply drafts are suggestions that a human reviews and approves.

13. Changes to this policy

We update this privacy policy when our services, our service providers or the legal situation change. The version published on this page applies.