Privacy Policy
Last updated: October 15, 2026 • Effective Date: January 1, 2026
1. Overview & Data Controller
Markot (“we”, “our”, or “us”) operates the Markot AI-first Marketing & Broadcast Hub. We are part of the AutoMono ecosystem, committed to strict privacy compliance under the General Data Protection Regulation (EU 2016/679) and Spanish Organic Law 3/2018 (LOPDGDD).
The Data Controller for user identity, authentication, and core account services is AutoMono Core, with Markot serving as processor and joint controller for marketing workspace content, campaign schedules, and broadcast dispatch channels.
2. Data We Collect
- Account Credentials: Handled securely through AutoMono Core Single Sign-On (SSO). Markot never receives or stores your raw plaintext passwords.
- Workspace & Campaign Assets: Content drafts, scheduled dates, brand tone guides, competitor URLs, and publishing channels configured within your tenant.
- Broadcast Subscriber Data: Contact handles (Email addresses, WhatsApp phone numbers, Discord User/Channel IDs, Telegram chat handles) provided by subscribers via our embeddable widgets with explicit opt-in consent.
- Audit & Telemetry Records: Append-only access logs, IP hashes, user-agent fingerprints, and system event timestamps retained for security and quota auditing.
3. Purpose & Legal Basis for Processing
We process your data exclusively under the following legal bases:
- Performance of a Contract (Art. 6.1.b GDPR): Enabling multi-channel campaign planning, automated digests, and webhook notifications.
- Explicit Consent (Art. 6.1.a GDPR): Managing newsletter and broadcast subscriptions with one-click unsubscribe links in every edition.
- Legitimate Interests (Art. 6.1.f GDPR): Preventing calendar post collisions, rate limit abuse, and platform security threats.
4. Your GDPR Rights (ARCO-POL)
As a European data subject, you hold full rights to access, rectification, erasure (“Right to be Forgotten”), restriction, data portability, and objection.
You can exercise self-service data portability and account erasure at any time directly from the dashboard under Settings > Profile > GDPR Data Rights.
5. Sub-processors & Data Transfers
All EU user data is stored within EU-located instances. External dispatch relays (Postmark/Resend for Email, official Meta Graph API for WhatsApp, Discord Bots, and Telegram Bot API) are bound under Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs).
6. Contact & Data Protection Officer (DPO)
For any questions regarding privacy, exercising your statutory rights, or lodging an inquiry, please contact our Data Protection Officer at dpo@automono.io or submit a notice to AutoMono Ecosystem Compliance, Madrid, Spain.