Privacy Policy

Account information. Your name, email address, and password when you create an account. Passwords are stored and verified by our dedicated identity service, never in our application database. Email verification and password reset codes are stored only as salted hashes and expire automatically.

Organization and team data. Organization names, member lists, roles and permissions, invitations, and ownership records for each workspace you belong to.

Research content. Surveys, questions, research categories and criteria, capture modes, KPIs, reports, and related configuration your team creates.

Survey response data. Answers submitted to surveys, session records (status, start and end times, duration), and any media files uploaded as answers (photos, audio, video). Public survey respondents may optionally provide a name and email address, or participate anonymously.

Billing information. Your plan, billing region, subscription status, and a record of completed payments (amount, currency, provider, timestamps). Card and payment-method details are collected and processed by our payment providers (Stripe or Razorpay) and never touch our servers.

Usage and technical data. Authentication tokens, security and audit logs (for example, who invited or removed a member, and who applied AI-generated changes), AI usage metering (token counts and estimated cost per feature), and standard server logs.

• To provide the service: workspaces, surveys, response collection, analytics, KPIs, reports, and exports.
• To authenticate you and enforce role-based permissions and per-organization data isolation.
• To provision workspaces after verified payment and to meter usage against your plan limits.
• To send transactional email: verification codes, team invitations, password resets, and account notifications.
• To power AI features you invoke, as described in section 4.
• To secure the platform, prevent abuse, keep audit trails, and provide support.

We do not sell your data, and we do not use it for third-party advertising.

When you answer a survey on MerkMetryx, your responses are collected on behalf of the organization running that survey, which controls how they are used. Providing your name or email on a public survey is optional - you can skip that step and participate anonymously. Uploaded media answers are stored privately and are accessible only to the organization that owns the survey. If you have questions about a specific survey, contact the organization that shared it with you, or reach us at the address below.

MerkMetryx includes AI features such as question drafting, result explanations, and a product assistant. When you use them, we send the relevant context to our AI model providers (currently Anthropic and OpenAI, with Voyage AI for retrieval embeddings) to generate the response. AI models are never given direct access to our databases: explanations of KPIs, trends, and results are generated only from figures our servers compute and hand to the model. AI-generated changes are applied only after you review and confirm them, every AI action is recorded in an audit log, and each organization has a monthly AI usage cap it can monitor in the app.

Payments are processed by Stripe (globally, in USD) or Razorpay (in India, in INR), depending on the billing region detected when you sign up. These providers handle your card details under their own privacy policies; we receive confirmation of payment events and keep our own record of completed transactions for billing integrity. If your subscription lapses, your data remains stored and readable - non-payment never deletes your data.

• MongoDB Atlas - primary database hosting.
• Amazon Web Services S3 - private storage for media uploads, charts, and report files.
• Stripe and Razorpay - payment processing.
• Email delivery provider - transactional email (verification codes, invitations, notifications).
• Anthropic, OpenAI, and Voyage AI - AI model providers for the features described in section 4.

These providers process data only as needed to deliver their part of the service.

• Traffic is encrypted in transit, and API requests are authenticated with signed, short-lived tokens.
• Each organization is an isolated workspace: data queries are scoped per organization on the server, and cross-organization access is rejected.
• Access within a workspace is controlled by fine-grained, server-enforced role permissions.
• Media files, charts, and reports live in private storage and are served only through short-lived signed links.
• Verification codes are stored hashed; uploaded files are validated by content, not just file name.
• Records carry audit fields, deletions are soft and recoverable internally, and completed survey responses are locked against modification.

We retain your data while your account or organization is active. If a subscription is canceled or payment fails, existing data stays readable while new changes are blocked. You can delete surveys, KPIs, reports, and other content from within the app. To request deletion of your account or your organization and its data, email us at the address below and we will process the request after verifying ownership.

We use browser storage for what the product needs to work: your session tokens, your active workspace selection, and preferences such as light or dark theme. We do not use third-party advertising cookies or cross-site trackers.

You can access and update your profile information in the app, and organization admins manage member data for their workspace. Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email us at the address below. If you are a survey respondent, we may refer your request to the organization that ran the survey, since it controls that data.

MerkMetryx accounts are intended for business use by people 18 or older, and the service is not directed to children. Organizations running surveys are responsible for ensuring their research complies with laws that apply to their respondents.

Our infrastructure providers may store and process data in regions outside your own. Where they do, we rely on the safeguards those providers offer and on contractual protections to keep your data protected to the standard described in this policy.

We will update this policy as the product evolves. When we make material changes, we will update the date at the top of this page and, for significant changes, notify account owners by email or in the app.

For any privacy question or request, contact us at business@agixinternational.com.