Privacy Policy

This Policy explains how MarketClue handles personal data collected through the public website at marketclue.com (the "Site") — including when you join the waitlist, contact us, or simply browse.

It does not cover the MarketClue application. Personal data processed inside the product is governed by the separate MarketClue Privacy Notice presented to you when you are granted access.

The controller of personal data collected through the Site is:

Controller

MarketClue LLC

Registered office

1441 Brickell Ave., Suite 1018, Miami, FL 33131, United States

Florida Document Number

L26000463790

Registered agent

Standard Rules LLC, 1441 Brickell Ave., Suite 1018, Miami, FL 33131

Privacy contact

privacy@marketclue.com

Data Protection Officer

Not appointed. MarketClue is not a public authority and does not process special category data at scale. Because the Site uses session recording, the Article 37(1)(b) "regular and systematic monitoring on a large scale" test has been considered rather than assumed: pre-launch waitlist volumes are not large scale. We will revisit this at product launch and whenever traffic materially increases.

EU representative (Article 27 GDPR)

MarketClue DevOps s. r. o., Mýtna 7643/42, 811 07 Bratislava – mestská časť Staré Mesto, Slovak Republic — a company in our group. Because we are established in the United States and offer the Site to people in the EEA, the GDPR requires us to have a representative there. You and any supervisory authority may address it on any matter concerning this Policy, in addition to or instead of us.

What do we collect?

Your e-mail address if you give it to us, anything you write to us, a recording of how you use the Site if you consent to it, and standard technical information about your visit.

Why?

To tell you when MarketClue opens, to answer you, to keep the Site working and secure, and — only with your consent — to understand how the Site is used and to measure and target our advertising.

Do we sell your data?

We do not sell personal data for money, and we never upload your e-mail address to an advertising platform — not in hashed form either. We do share something: with your Marketing consent, the advertising tags on this Site pass identifiers to those platforms so they can measure our advertising and show it to you. Under California law that counts as "sharing" for cross-context behavioural advertising. See section 13.2, and use the "Do Not Sell or Share My Personal Information" link in our footer to opt out.

Do we record what I do on the Site?

Only if you consent to analytics. We use session recording, which captures the pages you view, your mouse movement, clicks and scrolling. Text you type is masked before it leaves your browser.

Do we use it to profile you or make decisions about you?

We do not make automated decisions producing legal or similarly significant effects. Advertising platforms do build audience profiles from the data we share with them, with your consent.

How long do we keep it?

See the retention column in section 6. Unsubscribing stops the e-mails at once; we keep the address on a suppression list so we do not write to you again, and delete it 24 months after your last engagement — sooner if you ask us to (section 12).

How do I get out?

Unsubscribe link in every e-mail, the "Cookie settings" link in our footer, or write to privacy@marketclue.com.

You are not required to give us any personal data to read the Site. Joining the waitlist requires an e-mail address; without it we cannot notify you, which is the purpose it serves. There is no contractual or statutory obligation on you to provide anything, and the only consequence of not providing it is that you do not receive our e-mails.

You can read the whole Site and join the waitlist while refusing every optional cookie and every optional consent. We do not condition the waitlist on your consent to analytics or to advertising.

The following table is the operative record of our processing on the Site. Article references are to the EU GDPR, which applies to us although we are established in the United States, because we offer the Site to people in the EEA (Article 3(2)). Our representative in the EU is named in section 2.

If you join the waitlist we will send you a small number of messages: a confirmation, occasional progress updates, and a message when MarketClue opens.

We do not send third-party advertising, and we do not rent, sell or otherwise make your address available to any third party for that third party's own marketing purposes. We also do not give your address to an advertising platform for our own marketing — not in hashed form, not as seed data for a lookalike audience, not at all. The only address we hold is the one we e-mail, and the only people who see it are the providers in section 9 who send that e-mail for us.

Every message contains a one-click unsubscribe link and our postal address. Unsubscribing takes effect immediately and does not require you to give a reason or to log in anywhere.

For the updates, we record whether a message was opened and whether a link in it was clicked, in order to gauge interest and to stop sending to addresses that never engage. This uses a tracking pixel, and you can defeat it by disabling remote image loading in your e-mail client. The confirmation message carries no such pixel.

The confirmation is sent through SendGrid (Twilio Inc., United States), with open and click tracking switched off. Every later message is sent through Loops, Astrodon Corporation (United States), which stores your address on our behalf. The sub-processors Loops itself uses are listed at loops.so/subprocessors, and our processing agreement with Loops requires it to return or securely delete the data it holds for us within 30 days of our request. See sections 9 and 10.

The Site uses cookies and similar technologies. Strictly necessary items are set without consent because the Site cannot function without them. Everything else — preferences, analytics, session recording, and advertising — is set only after you have given consent through the cookie banner, and you can change or withdraw that consent at any time. Full detail, including the inventory of each item and its duration, is in the Cookie Policy.

Any advertising tag we run reaches the Site through Google Tag Manager; Google Analytics and PostHog are loaded by the Site's own code. Google Tag Manager does not itself set cookies for advertising or analytics, and its container is requested only once you have accepted analytics or advertising cookies: no tag in a consent-requiring category fires before you consent. Which advertising platforms are on the Site at any time is listed in the Cookie Policy at section 7.4, which says so plainly when none is.

We do not sell personal data for money. We share it with the recipients set out below. Where a recipient acts on our instructions it does so under a written contract meeting Article 28 GDPR; where a recipient determines its own purposes, that is identified in the table. An advertising platform receives nothing until its tag is on the Site, so for those five rows the safeguard column names the arrangement that will govern the platform once it runs, not one already in force. Which of them are on the Site at any time is in the Cookie Policy, section 7.4.

We are established in the United States, and so are several of our service providers. What you send us through the Site is collected by us directly. Under the European Data Protection Board's guidance that is not a "transfer" in the GDPR sense, but it does mean your data is held by a United States company — one that is subject to the GDPR under Article 3(2) and to this Policy, and that has a representative in the EU named in section 2. Where personal data is then passed on from the EEA to a provider outside it, we rely on one or both of the following:

• an adequacy decision of the European Commission, including — for a provider that is certified — the EU-US Data Privacy Framework;
• the European Commission's Standard Contractual Clauses, together with technical measures such as encryption in transit and at rest.

You may request a copy of the safeguards applying to a particular transfer by writing to privacy@marketclue.com.

We apply technical and organisational measures appropriate to the risk, including: encryption of traffic in transit (TLS); access control on the systems holding waitlist data, restricted to those who need it; masking of typed input before session recordings leave your browser; and contractual security obligations on our processors.

No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority or authorities within 72 hours as required by Article 33 GDPR, and we will notify you directly where Article 34 requires it.

If you are in the EEA, you have the following rights in relation to your personal data. They are not absolute and some depend on the legal basis for the processing.

Access (Art. 15)

To be told whether we hold personal data about you and to receive a copy of it, together with information about how it is used.

Rectification (Art. 16)

To have inaccurate data corrected and incomplete data completed.

Erasure (Art. 17)

To have your data deleted where it is no longer needed, where you withdraw consent and there is no other basis, or where it has been processed unlawfully.

Restriction (Art. 18)

To have processing paused while an accuracy dispute or an objection is resolved.

Portability (Art. 20)

To receive the data you gave us, in a structured, commonly used, machine-readable format, and to have it sent to another controller where technically feasible. This applies to data processed on consent or contract.

Objection (Art. 21)

To object at any time to processing based on our legitimate interests, on grounds relating to your particular situation. Where we process for direct marketing, you may object at any time and we will stop, with no balancing test.

Withdraw consent (Art. 7(3))

To withdraw consent at any time, as easily as you gave it. Withdrawal does not affect the lawfulness of processing before it.

Automated decisions (Art. 22)

Not engaged. We do not make decisions about you by automated means that produce legal or similarly significant effects.

Complain (Art. 77)

To lodge a complaint with a supervisory authority.

This section applies if you live in a US state with a comprehensive consumer privacy law. As at September 2026 nineteen such laws are in force: in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, with further laws taking effect in 2027.

The Site is not directed at children and is intended only for people aged 18 or over. We do not knowingly collect personal data from anyone under 18, and we do not knowingly collect personal information from children under 13 within the meaning of the US Children's Online Privacy Protection Act. We do not knowingly share the personal information of anyone under 16 for cross-context behavioural advertising. If you believe a child has given us personal data, write to privacy@marketclue.com and we will delete it.

The Site does not carry out profiling or automated decision-making producing legal or similarly significant effects concerning you.

The MarketClue product uses artificial intelligence to explain market data. That processing is described in the product privacy notice and is outside the scope of this Policy. Personal data collected through the Site is not used to train any AI model, and session recordings are not used to train any AI model.

We may update this Policy. The version in force is the one posted here, identified by the "last updated" date at the end of it. Where a change materially affects how we use data we already hold about you, we will tell you by e-mail before it takes effect and, where the law requires it, ask for your consent again.

Privacy enquiries and rights requests: privacy@marketclue.com

Post: MarketClue LLC, 1441 Brickell Ave., Suite 1018, Miami, FL 33131, United States

Representative in the European Union (Article 27 GDPR): MarketClue DevOps s. r. o., Mýtna 7643/42, 811 07 Bratislava – mestská časť Staré Mesto, Slovak Republic

Last updated: 8 September 2026. Version 1.0.