Privacy Policy

Overview

Marrow (“we,” “us”) respects your privacy. This policy describes what we collect when you use usemarrow.co, how we use it, and your choices. It applies to the Marrow web app and related services.

Information we collect

• Account data — email, name, profile fields, timezone, and authentication identifiers (e.g. via Google sign-in through Supabase Auth).
• Content you provide — knowledge sources, uploaded files, chat messages, playbook definitions, calibration answers, and brain training corpus.
• Connected tool data — when you connect integrations (via Composio), we access data from those tools only to run playbooks and sync knowledge you configure. Credentials are stored by our integration partners, not in plain text in Marrow.
• Usage & technical data — logs, device/browser metadata, and product analytics needed to operate and secure the service.
• Billing — subscription status and Stripe customer references when billing is enabled (payment details are handled by Stripe).

How we use information

• Provide, maintain, and improve Marrow (playbooks, chat, knowledge, scheduling)
• Process AI features (LLM providers such as OpenRouter) using your prompts and context
• Send transactional email (e.g. scheduled briefing notifications via Resend)
• Enforce terms, prevent abuse, and comply with law

We do not sell your personal information. Expert pack installs use read-only author judgment on your connected data — pack authors do not receive your raw tool data unless a feature explicitly says otherwise.

Google user data (Limited Use)

When you connect a Google service (e.g. Gmail) — directly or through Composio — Marrow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not:

• use or transfer Google user data to serve advertising;
• sell Google user data, or share it with third parties, except as needed to provide the feature you requested;
• use Google user data to develop, train, or improve any generalized or standalone AI/ML models. Email and other Google content is passed to AI models only to generate the specific output you asked for (e.g. a briefing or draft), never for model training;
• transfer or use Google user data for any purpose other than providing and improving the features you use.

You can revoke Marrow's (and Composio's) access to your Google account at any time from your Google account settings.

AI processing

Marrow sends relevant context (persona, skills, run summaries, retrieved knowledge) to AI models to generate responses and playbook output. Do not submit sensitive information you are not comfortable processing through third-party AI providers. Model providers have their own privacy terms.

Sharing

We share data with service providers who help us run Marrow, including:

• Supabase (auth, database, storage)
• Composio (integrations and tool execution)
• LLM / speech providers (e.g. OpenRouter)
• Stripe (payments)
• Resend (email)
• Vercel (hosting)

We may disclose information if required by law or to protect rights, safety, and security. Public profile pages (/{handle}) only show content you publish.

Retention & deletion

We retain data while your account is active. You can delete your account in Settings, which removes your profile and associated data subject to backup and legal retention limits. Some aggregated or de-identified data may be kept for analytics.

Security

We use industry-standard measures including encrypted transport, row-level security in Postgres, and scoped integration credentials. No method of transmission or storage is 100% secure.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal data. Contact us to exercise these rights. California residents may have additional rights under the CCPA; EU/UK users may have GDPR rights.

Children

Marrow is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect their data.

Changes

We may update this policy. The “Last updated” date will change when we do. Material changes may be communicated in-app or by email.

Contact

Privacy questions: hello@usemarrow.co