Privacy Policy

MARZ AI

Privacy Policy

Effective Date: March 1, 2026 | Last Updated: March 1, 2026

This Privacy Policy describes how MARZ AI ("MARZ," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the MARZ AI platform, website, and related services (collectively, the "Service"). By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

When you create an account, subscribe, or use our features, you may provide us with:

Account information: your name, email address, phone number, country, agency name, and sales type (e.g. residential, commercial)

Payment information: billing details processed securely through Stripe (we do not store your full credit card number)

Lead data: names, phone numbers, email addresses, and notes of leads you upload via CSV or manual entry

Call script configurations: objectives, instructions, custom questions, voice preferences, and agency introduction text you set for AI calling campaigns

Google account data: calendar events and related metadata when you connect your Google Calendar via OAuth

Content preferences: topics, tone, and posting schedules you configure for AI-generated social media content

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

Usage data: pages visited, features used, actions taken, timestamps, and session duration

Device information: browser type, operating system, IP address, and device identifiers

Log data: server logs, error reports, and performance metrics

1.3 Information from Third-Party Services

When you connect third-party accounts, we receive data from those services:

Google Calendar: calendar event titles, dates, times, and descriptions (used to sync your content calendar)

Stripe: subscription status, payment confirmations, and billing history

VAPI (voice AI provider): call transcripts, call duration, call outcomes, and recordings when you use the AI cold calling feature

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Improving the Service

Creating and managing your account

Generating AI-powered social media content calendars tailored to your real estate niche

Syncing content schedules with your Google Calendar

Initiating and managing AI cold calls to your uploaded leads via VAPI

Processing call transcripts to extract lead qualification data, callback preferences, and summaries

Processing subscription payments through Stripe

Providing customer support and responding to inquiries

2.2 Communication

Sending transactional emails (account confirmation, password resets, subscription receipts)

Notifying you of call results, lead qualification outcomes, and campaign summaries

Sending product updates and feature announcements (you may opt out at any time)

2.3 Analytics and Improvement

Analyzing usage patterns to improve features and user experience

Monitoring system performance and diagnosing technical issues

Conducting aggregated, anonymized analysis of how the Service is used

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

3.1 Service Providers

We use trusted third-party providers to operate the Service:

Provider

Purpose

Data Shared

Stripe

Payment processing

Email, subscription plan, billing info

VAPI

AI voice calling

Lead phone numbers, names, call scripts

OpenAI

Content generation & transcript analysis

Prompts, content preferences, call transcripts

ElevenLabs

Voice synthesis for call preview

Text of call introduction scripts

Google

Calendar sync & OAuth

Calendar events, authentication tokens

Firebase / Cloud Run

Hosting & database

All application data (encrypted at rest)

3.2 Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud, or protect the safety of users or the public.

3.3 Business Transfers

If MARZ AI is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4. AI-Specific Disclosures

MARZ AI uses artificial intelligence in several core features. This section explains how AI processes your data.

4.1 AI Content Generation

When you generate social media content, your preferences (topics, tone, location, niche) are sent to OpenAI's API to produce content. We do not use your content to train AI models. OpenAI processes this data under their API data usage policy, which states that API inputs and outputs are not used for model training.

4.2 AI Cold Calling

When you initiate a call, the following data is sent to VAPI's voice AI platform: the lead's phone number and name, your configured call script and questions, and your selected voice preference. VAPI uses this data solely to conduct the call. Call recordings and transcripts are returned to MARZ and stored in your account. You are responsible for ensuring you have appropriate consent or legal basis to contact the leads you upload.

4.3 Transcript Processing

After each AI call, the transcript is sent to OpenAI to extract structured data (qualification status, answers to your questions, callback preferences). This processing happens automatically and the results are stored on your lead records.

5. Data Retention

We retain your information as follows:

Account data: retained for as long as your account is active, plus 30 days after deletion request

Lead data: retained for as long as your account is active. You may delete individual lead sets or all lead data at any time from within the application

Call recordings and transcripts: retained for 90 days after the call, then automatically deleted. You may request earlier deletion

Payment records: retained for 7 years to comply with financial and tax regulations

Usage analytics: retained in aggregated, anonymized form indefinitely

6. Data Security

We implement industry-standard security measures to protect your information:

All data is encrypted in transit using TLS 1.2 or higher

Data at rest is encrypted using AES-256 encryption on our cloud infrastructure

Payment information is processed by Stripe, which is PCI DSS Level 1 certified

Access to production systems is restricted to authorized personnel with multi-factor authentication

We conduct regular security reviews of our codebase and infrastructure

Despite these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your data.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You may request a copy of the personal information we hold about you. We will provide this in a commonly used, machine-readable format within 30 days of your request.

7.2 Correction

You may update your account information at any time through the Settings page. For other corrections, contact us at privacy@marz.ai.

7.3 Deletion

You may request deletion of your account and associated data by contacting us at privacy@marz.ai or using the "Delete Account" option in Settings. Upon deletion, we will remove your personal data within 30 days, except where retention is required by law.

7.4 Objection and Restriction

You may object to or request restriction of certain processing activities. Where we process your data based on legitimate interests, you may object and we will cease processing unless we have compelling legitimate grounds.

7.5 Withdrawal of Consent

Where we rely on your consent to process data (such as connecting your Google Calendar), you may withdraw that consent at any time by disconnecting the integration in your Settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7.6 Marketing Opt-Out

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or updating your preferences in Settings.

8. International Data Transfers

MARZ AI operates globally and your data may be processed in countries other than your own, including the United States. When we transfer data internationally, we implement appropriate safeguards including standard contractual clauses and encryption to ensure your data remains protected.

9. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We do not use third-party advertising cookies or tracking pixels. Analytics data is collected server-side and does not involve third-party tracking scripts.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

11. Compliance with Calling Regulations

The AI cold calling feature is a tool provided to you. As the user, you are responsible for:

Ensuring you have appropriate consent or legal basis to contact leads you upload

Complying with all applicable telemarketing and calling regulations in your jurisdiction, including but not limited to the Telephone Consumer Protection Act (TCPA) in the United States, GDPR in the European Union, and equivalent laws in other countries

Maintaining and honoring do-not-call lists

Making required disclosures to call recipients as required by local law

MARZ AI provides the technology platform but does not assume responsibility for your compliance with local calling regulations. We recommend consulting with a legal professional regarding the regulations applicable to your use case and jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by posting a prominent notice on the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@marz.ai

Company: MARZ AI

We will respond to all privacy-related inquiries within 30 days.

End of Privacy Policy