Privacy Policy

1. Who we are (Data Controller)

The data controller for this website is MarvisX (justaskmarvis.com) ("we", "us"). For any privacy request — access, correction, deletion, objection, or to withdraw consent — contact us at hello@justaskmarvis.com or through the contact form on the home page.

2. What data we collect

We collect the minimum data needed to run the site and answer enquiries.

2.1 Contact form

When you submit the contact form, we collect and store in a Cloudflare D1 database (table contacts):

• Email address — so we can reply to you.
• Your message — the free-text you write.
• Interest tier — the option you select (beta tester / enterprise / hosted waitlist).
• Source — which page the form was submitted from.
• Technical metadata derived by Cloudflare at submission time: approximate country and city (from your IP — the raw IP is not stored), browser user-agent string, and referring URL.

2.2 Analytics (only after consent)

Analytics do not run until you accept via the cookie banner (which sets the mx_consent cookie). Once you accept, we load Google Tag Manager (container GTM-TK78X5SL, served first-party from /jam1). Inside that container runs Microsoft Clarity (project wxpq3l0trv) for behavioural analytics, including session recording (a replay of mouse movement, scrolling, clicks, and page interactions). Google Analytics 4 and Google Ads tags may be added inside the same container in the future. If you decline, none of these load.

2.3 Hosting logs

The site is hosted on Cloudflare. Cloudflare processes standard request metadata (IP address, user-agent, requested URL, timestamps) to deliver and secure the site, per the Cloudflare Privacy Policy.

3. Why we use it and the legal basis

• Contact form — purpose: to reply to your enquiry and, where relevant, take pre-contractual steps. Legal basis: performance of a contract / taking steps at your request (Art. 6(1)(b) GDPR), and our legitimate interest in responding to enquiries (Art. 6(1)(f)).
• Analytics & session recording (Clarity via GTM) — purpose: to understand how the site is used and improve it. Legal basis: your consent (Art. 6(1)(a) GDPR), given through the cookie banner and withdrawable at any time.
• Hosting & security logs — purpose: to serve the site and protect it from abuse. Legal basis: legitimate interest (Art. 6(1)(f)).

4. Third parties we share data with

We do not sell personal data and do not share it for third-party marketing. We rely on these processors:

• Cloudflare, Inc. — hosting, the D1 database that stores contact submissions, and edge security. See the Cloudflare Privacy Policy.
• Microsoft (Clarity) — behavioural analytics and session recording, loaded only after consent. See the Microsoft Privacy Statement and Clarity cookie information.
• Google (Tag Manager, and later GA4 / Google Ads) — tag delivery and, if enabled, measurement. Loaded only after consent. See the Google Privacy Policy.

Some of these providers may process data outside the EEA. Where that happens, transfers rely on the providers' Standard Contractual Clauses and supplementary safeguards.

5. How long we keep it

• Contact submissions — kept for up to 24 months after our last contact, then deleted, unless an ongoing relationship requires longer.
• Analytics / session recordings — retained according to the analytics provider's defaults (Microsoft Clarity retains data for a limited period; GA4, if enabled, per its configured retention). No analytics data is collected at all if you decline consent.
• Hosting logs — retained short-term by Cloudflare for operational and security purposes.

6. Your rights

Under the GDPR you have the right to access, rectify, and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time (withdrawal does not affect processing already carried out). To exercise any of these, email hello@justaskmarvis.com or use the contact form. You can also withdraw analytics consent yourself at any time — see the Cookie Policy for the reset control. You have the right to lodge a complaint with your local data protection authority.

7. Cookies

We use one strictly necessary cookie (mx_consent) to remember your consent choice. Analytics cookies are only set by Microsoft Clarity / Google after you accept. Full details are in the Cookie Policy.

8. Changes to this policy

We will update this policy as the product and the site evolve. Material changes will be flagged at the top of this page with a new "Last updated" date.