PRIVACY POLICY

Privacy Policy

Effective Date: 20.11.2025 | Last Updated: 27.09.2026

1. Introduction

MARKETRONIX LTD ("Ratify," "we," "our," or "us"), a company registered in England and Wales under company number 17331464 with its registered office at Dept 6916, 196 High Road, Wood Green, London, N22 8HH, United Kingdom, is the controller of your personal data and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the website at ratify.studio and Ratify's build-on-demand service, in which an AI estimate prices the work and our engineers build it (the "Service"). Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when registering or using our Service:

  • Account Information: Name, email address and password (stored only as a one-way hash)
  • Payment Information: Credit card details, billing address (processed securely via our payment processors - we do not store full card numbers ourselves)
  • Project Information: Your project brief, requirements and technical specifications, as you type them into the order form
  • Communications: Messages you send us through the contact form, and problems you report on a delivered build
  • Professional Information: GitHub profile, technical expertise and experience, how many apps you have taken to production, how long a small web app usually takes you and the AI coding tools you use (for engineers who apply to build with us)
  • CV (optional): a PDF or Word document an engineer may attach to an expert application. It is used only to assess that application, is kept in private storage and is seen only by the staff who review applications
  • Identity document (experts only): a photo or scan of a passport, national ID card or driving licence, which every engineer who applies to build with us must upload so we can verify who we pay. It is kept in a private store used only for identity documents and is seen only by the staff who review applications

2.2 Automatically Collected Information

When you access our Service, we automatically collect:

  • Device Information: IP address, browser type, operating system, device identifiers
  • Usage Data: Pages visited and features used, only if you accept analytics cookies (see Cookie Policy)
  • Performance Data: API response times, error rates and build turnaround
  • Location Data: The country your IP address resolves to, checked when an account is created (not precise location)

We run no advertising tools. If you decline analytics, we do not record which pages you visit or what you click.

2.3 Code and Project Data

We process the project request and code you submit, to estimate and build your project, and the code we deliver. This includes source code, the estimate and the engineers’ notes, documentation, technical requirements, and any materials you provide for project completion.

3. How We Use Your Information

3.1 Service Provision

  • Estimate your build from your request and code
  • Pass your paid build to the engineers building it
  • Process payments and manage your credit balance
  • Provide customer support and technical assistance
  • Show your project's status on your account, including when your build is delivered

3.2 Service Improvement

  • Analyze usage patterns to enhance user experience
  • Improve the accuracy of our estimates
  • Develop new features based on user needs
  • Conduct research and statistical analysis

3.3 Legal and Security

  • Comply with legal obligations and regulations
  • Detect and prevent fraud, abuse, or security threats
  • Enforce our Terms of Service and agreements
  • Protect rights and safety of users and the public

4. Code Privacy and Intellectual Property

4.1 Ownership

You retain full ownership of all code built for your projects. Upon payment completion, all intellectual property rights to the delivered code transfer to you exclusively.

4.2 Confidentiality

We treat all project code and requirements as strictly confidential. Your code is never:

  • Shared with other clients or third parties
  • Used to train AI models without explicit consent
  • Reused for other projects or purposes
  • Stored longer than necessary for service delivery

4.3 The Engineers Who Build It

Engineers accept the confidentiality terms of our Expert Terms before they work on a project, and sign a separate non-disclosure agreement where you ask for one. They may not retain, share or reuse your code once the build is delivered.

5. Data Sharing and Disclosure

5.1 Service Providers

We share data with third-party service providers, by category and purpose:

  • Payment processing: our card payment provider, receiving payment information only
  • Hosting: Vercel Inc. (United States), which runs this application and so handles everything you send it
  • Database: Neon, Inc. (servers in the United States), which stores your account, projects, estimates and credit records
  • Product analytics: PostHog, Inc. (United States), receiving pageviews and clicks (and, if you are signed in, your account ID, email and name), only where you have accepted analytics cookies
  • AI estimation: OpenAI (United States), the AI model provider that estimates your build and runs the free code check, receiving your request, an excerpt of the code you send (file list, manifests and key source files) and any snippet you paste into the code check
  • File storage: Vercel Blob (Vercel Inc., United States), private storage for the zip files and code you send, readable only by the estimator and the team building your project, and for any CV attached to an expert application, readable only by the staff who review applications
  • Email: Namecheap, Inc. (United States), which forwards mail sent to our support address to the mailbox we reply from, receiving your email address and what you write
  • Internal team notifications: Telegram (Telegram FZ-LLC, United Arab Emirates), the messaging service we use to alert our own team, receiving your name, email address and the text of anything you send us through a form on this site, so that a person sees it and can answer
  • Engineers: the people building your project, receiving your request and your code

5.2 Legal Requirements

We may disclose information if required by law or in response to:

  • Court orders, subpoenas, or legal process
  • Government or regulatory requests
  • Protection of our legal rights or property
  • Emergency situations involving potential harm

5.3 Business Transfers

In the event of merger, acquisition, or sale of assets, user information may be transferred. We will post a prominent notice on our Service before any such transfer.

6. Data Security

6.1 Security Measures

The measures we use:

  • Encryption: HTTPS (TLS) for data in transit; our database and file-storage providers encrypt data at rest
  • Access Controls: Role-based permissions: customers see only their own projects, and only staff accounts reach the build desk; uploaded code is stored privately
  • Infrastructure: Hosted on managed cloud hosting and database providers
  • People: Every build is done and checked by engineers, not generated and shipped unread
  • Compliance: GDPR and CCPA practices as described in this policy. We do not hold SOC 2, ISO 27001 or an equivalent certification.

6.2 Data Breach Response

In the unlikely event of a personal data breach, we will notify the Information Commissioner's Office within 72 hours of becoming aware of it where the breach is likely to result in a risk to your rights and freedoms, and we will notify affected users within 72 hours, providing information about the incident, its potential impact, and the mitigation steps we are taking.

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

  • Access: Download a copy of your data from Settings
  • Correction: Update or correct inaccurate information
  • Deletion: Delete your account from Settings
  • Portability: The download is a JSON file you can take elsewhere
  • Restriction: Limit how we process your data
  • Objection: Opt-out of certain data uses

7.2 Communications We Send

Ratify does not send automatic email at present: your projects, your credit statement and the pages of your account are where you see what has happened. When you write to us, a person replies by email. We do not operate a newsletter or send marketing email. For anything else, contact support@ratify.studio.

7.3 Do Not Track

We honor Do Not Track browser signals and will not track users who have enabled this setting.

8. International Data Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards through Standard Contractual Clauses and adequacy decisions for international transfers.

9. Data Retention

We retain data for different periods based on purpose:

  • Account data, projects and uploaded code: while your account is open; deleted at once when you delete the account from Settings, with no waiting period
  • Expert applications and any CV attached to them: kept until you ask us to delete them at support@ratify.studio, whether the application is approved or not; if you were approved and later delete your account from Settings, your application and CV are deleted with it
  • Expert identity documents: deleted when the application is declined; if you are approved, kept while your expert account exists and deleted with the account when you delete it from Settings
  • Payment Records: 7 years (legal requirement)
  • Analytics data: up to 2 years, then deleted; you can stop collection at any time from "Manage cookies"

10. Children's Privacy

Our Service is not intended for anyone under 18 years of age, the minimum age in our Terms & Conditions. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. European and UK Privacy Rights (GDPR)

If you are in the United Kingdom or the European Economic Area, the UK GDPR and the EU GDPR give you the rights set out in this section. This section previously lived on a separate GDPR page; it is kept here so there is one place to read about your data.

11.1 Our Lawful Bases for Processing

We process personal data on these bases, and only these:

  • Performance of a contract: to create and operate your account, take your order, estimate and build your project, deliver it, and handle credits, payments and refunds.
  • Legal obligation: to keep payment and accounting records, and to respond to lawful requests from authorities.
  • Legitimate interests: to keep the Service secure, prevent fraud and abuse, and improve our estimates. We balance this against your rights, and you may object (see 11.2).
  • Consent: for optional analytics cookies. Consent is requested through the cookie banner and can be withdrawn at any time from "Manage cookies" in the footer, with immediate effect and no consequence to your account.

11.2 Your Rights in Detail

  • Right of access: obtain confirmation that we process your data and a copy of the personal data we hold about you.
  • Right to rectification: have inaccurate personal data corrected and incomplete data completed.
  • Right to erasure: have your personal data deleted (the "right to be forgotten"), except where we must retain it to meet a legal obligation — payment records, for example, are kept for the period stated in section 9.
  • Right to restrict processing: require us to limit how we use your data while an accuracy or objection question is resolved.
  • Right to data portability: receive the data you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
  • Right to object: object to processing carried out on the basis of our legitimate interests, on grounds relating to your particular situation.
  • Right to withdraw consent: withdraw any consent you have given, at any time, without affecting processing carried out before you withdrew it.
  • Rights in relation to automated decision-making: we do not make decisions about you by solely automated means that produce legal or similarly significant effects. An AI model estimates your build; you decide whether to accept it, and engineers do the work.

How to exercise them: write to support@ratify.studio. We will respond within one month of receiving your request, free of charge. If a request is complex we may extend that by two further months, and we will tell you within the first month if we do.

11.3 Complaining to a Supervisory Authority

You can complain to a data protection supervisory authority at any time, and you do not have to raise the matter with us first — though we would prefer the chance to put it right. MARKETRONIX LTD is established in England and Wales, so the supervisory authority is:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
Helpline: 0303 123 1113
Website: ico.org.uk

If you are in the EEA, you may instead complain to the supervisory authority of the country where you live, work, or where the alleged infringement took place.

12. Cookies and Tracking Technologies

12.1 Types of Cookies

  • Essential: Required for Service functionality
  • Analytics (optional): Help us understand usage patterns; set only after you press Accept
  • Preferences: The currency you picked and your answer to the cookie banner. These are kept in your browser's local storage, not in a cookie, and are never sent to us

12.2 Cookie Management

You can control cookies through browser settings. Disabling certain cookies may limit Service functionality. The Cookie Policy lists each cookie and stored item by name.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced on the Service at least 30 days before taking effect. Continued use after changes constitutes acceptance.

This privacy policy is provided in English for clarity and legal compliance. Translations may be available upon request.

14. Contact

Questions about your data or this policy: support@ratify.studio or the contact page.