Privacy policy

Last updated: 19 October 2026

This policy explains what happens to the information you give us when you join the Marbox waitlist on marbox.ai.

Who we are

Marbox is operated by Brandergate, Inc., a Delaware corporation in the United States, doing business as Marbox. We decide how your information is used, which makes us its "controller".

What we collect

Your email address, as soon as you enter it in the waitlist box, even if you never confirm it.
Your role, which you choose when you join, kept even if you never confirm your email.
The time you joined and the time you confirmed.
To stop abuse, short records of sign-up and code-entry attempts, kept as separate records of your email address and of a hashed (pseudonymised) form of your internet (IP) address. We do not store the IP address itself, but our hosting providers see it in their server logs.
Visit statistics: the page you view, the site that sent you, your country, your browser and device type, and whether you joined the waitlist. These are counted without cookies.
Internal notes our team may add to your waitlist entry, such as when we last contacted you.

We collect nothing else through this page. We use no advertising trackers, and the page sets no cookies.

Why we use it, and on what legal basis

To confirm your email with a six-digit code, put you on the waitlist, and contact you when your early access is ready. Legal basis: your consent, which you give by joining and confirming (GDPR Article 6(1)(a)).
To protect the sign-up form from abuse, such as automated sign-ups. Legal basis: our legitimate interest in keeping the service secure (GDPR Article 6(1)(f)).
To understand how many people visit and join, so we can improve the site. Legal basis: our legitimate interest in running it (GDPR Article 6(1)(f)).

Your email address and role are needed to join; without them we cannot add you to the list. We make no automated decisions about you and build no profile of you.

We will not send you marketing newsletters through this waitlist, and we never sell your information.

Who handles it for us

Our team at Marbox can see your waitlist details.
Supabase stores the waitlist (servers in the United States, US East).
Resend sends our emails (United States, US East).
Vercel hosts this website and counts visits, without cookies and without building a profile of you.

Transfers outside Europe

Our providers store data in the United States. Where your information leaves the European Economic Area, the transfer relies on the safeguards in our providers' data processing terms, such as the European Commission's Standard Contractual Clauses, or on the EU-US Data Privacy Framework where a provider is certified under it.

How long we keep it

We keep your waitlist details, any address you entered but did not confirm, the records we use to stop abuse, and the records of the confirmation codes we sent you, until you ask us to remove them. The codes themselves stop working 10 minutes after we send them.

Your rights

You can ask us to show you the information we hold about you, correct it, delete it, limit how we use it, or give it to you in a portable format, and you can object to how we use it. You can object at any time to the uses that rely on our legitimate interest, and you can withdraw your consent at any time, by writing to info@marbox.ai; withdrawing does not affect anything we did before. You can also complain to the data protection authority in your country.

Your browser

The page remembers whether you chose light or dark mode, in your own browser only. Nothing about that choice is sent to us.

Changes

If we change this policy, we will update the date at the top. If a change affects how we use information we already hold, we will tell you by email first.