Privacy Policy

1. Overview

This Privacy Policy describes how Marco ("we," "us," or "our") collects, uses, and protects information submitted through the Marco Business Verification Service ("Service"). This Service is used to verify that individuals claiming a business page on the Marco platform are legitimate owners or authorized operators of that business.

2. Information We Collect

When you use this Service, we collect the following information:

• Legal business name, trade name, and business address
• Business owner or operator full name
• State of registration and Employer Identification Number (EIN), where applicable
• Business email address
• Business phone number
• Uploaded business documents (e.g. business license, LLC filing, franchise agreement)

3. How We Use Your Information

Information collected through this Service is used solely for the purpose of verifying business ownership or operational authority. Specifically:

• Business information is cross-referenced against public business records and Google Places to confirm the business exists at the submitted address
• Uploaded documents are analyzed to verify the submitter's association with the business
• Business email addresses are used to send a one-time verification link confirming control of that inbox
• Business phone numbers are used to send a one-time verification code via SMS or automated voice call confirming control of that phone line
• Verification results are reported to the Marco platform to update the status of the associated community page

We do not use your information for marketing purposes, and we do not sell or share your personal information with third parties except as necessary to perform verification (see Section 5).

4. SMS and Voice Communications

By submitting a business phone number through this Service, you consent to receive a one-time verification code via SMS or automated voice call at that number. This message is sent solely to confirm that you control the submitted business phone line.

• Message frequency: one message per verification attempt
• Message and data rates may apply
• Verification codes expire after 10 minutes
• To opt out, do not submit your phone number through this Service
• For help, contact support@marco.app

5. Third-Party Services

We use the following third-party services to operate this verification pipeline:

• Twilio — SMS and voice call delivery for phone verification
• Resend — Email delivery for email verification and decision notifications
• Google Places API — Business existence lookup by name and address
• Anthropic (Claude) — Document analysis and field extraction
• Cloudflare R2 — Secure, private storage of uploaded documents
• MongoDB Atlas — Secure storage of verification records

Each provider is bound by their own privacy and data protection policies. Uploaded documents are stored in a private, access-controlled storage bucket and are never publicly accessible.

6. Data Retention

Verification records are retained for a minimum of 12 months to support audit, dispute resolution, and compliance purposes. Uploaded documents are retained for the duration of the associated verification record. You may request deletion of your data by contacting us at support@marco.app.

7. Data Security

All data transmitted through this Service is encrypted in transit via HTTPS. Uploaded documents are stored in a private Cloudflare R2 bucket and are only accessed server-side when required for verification or admin review. No documents are accessible via public URL.

8. Contact

For questions about this Privacy Policy or to request data deletion, contact us at support@marco.app.