Privacy Policy

This policy explains what data Cellcath collects, why we collect it, who we share it with, and what rights you have. Cellcath is operated by Current Digital Marketing, LLC, a Rhode Island Limited Liability Company located at 12 Mayflower Drive, Cumberland, Rhode Island ("we," "us," "our").

The short version: We collect what we need to run the Service. We don't sell your data. We don't train AI models on it. We share data only with the payment processor (Stripe) and the advertising platforms you choose to connect (Meta).

1. What We Collect

Account information

• Email address
• First name and last name
• Password (stored hashed, never in plain text)

Billing information

Handled entirely by Stripe. We never see or store your full credit card number. We receive a customer ID and subscription status from Stripe.

Meta Ads data (when you connect your account)

• OAuth access tokens (stored encrypted)
• Ad account IDs and names
• Campaign, ad set, and ad performance metrics (spend, CTR, CPM, ROAS, impressions, clicks)
• Pixel IDs and pixel event data (PageView, InitiateCheckout, Purchase, Lead)

Funnel and offer data (when you submit it)

• URLs you submit for scanning (sales pages, checkout pages)
• Scraped content from those URLs (headlines, copy, CTAs, page structure)
• Offer details you enter (name, price, guarantee, order bumps, upsells)
• Manually entered funnel metrics if you use the manual fallback

Diagnostic outputs

• Scan results, scores, prioritized fixes, AI-generated copy rewrites, A/B test history

Usage data

• Pages visited, features used, error logs
• IP address and browser type (for security and debugging)

2. Why We Collect It

We use your data only to:

• Run the diagnostic engine and deliver scored results.
• Sync Meta Ads metrics on your behalf.
• Generate AI-powered fix recommendations and copy rewrites.
• Process payments and manage your subscription.
• Send transactional emails (login confirmations, billing receipts, scan notifications).
• Improve the Service (debugging, error monitoring, feature usage analysis — never with individually identifying data).
• Respond when you contact us for support.

3. Who We Share It With

We share data only with the service providers required to operate Cellcath:

• Stripe — payment processing. Receives email, name, payment method.
• Supabase — database and authentication. Stores all account and diagnostic data.
• Vercel — application hosting. Processes requests and serves the app.
• Anthropic — AI model provider. Receives the content needed to generate diagnostics and fix recommendations. Anthropic does not train models on this data per their API terms.
• Meta — when you connect your Meta Ads account, data flows between Cellcath and Meta to sync metrics. You control what's connected from your dashboard.

We do not share data with advertising networks, analytics brokers, data aggregators, or any third party not listed above.

We do not sell your data — ever.

We do not train AI models on your data.

4. Where Your Data Lives

All data is stored on US-based infrastructure (Supabase, Vercel, Stripe, Anthropic). If you're outside the US and use the Service, your data will be processed in the US.

5. How Long We Keep It

• Account data: retained while your account is active.
• Diagnostic scans and metrics: retained while your account is active so you can track progress over time.
• After cancellation: retained for 30 days, then permanently deleted unless you request earlier deletion.
• Billing records: retained for 7 years for tax and compliance reasons.

You can request deletion of your data anytime by emailing mark@marketwithmark.com.

6. Your Rights

Depending on where you live, you may have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent (where processing is based on consent).

To exercise any of these rights, email mark@marketwithmark.com. We'll respond within 30 days.

California residents: You have additional rights under the CCPA, including the right to know what categories of personal information we collect and the right to opt out of any "sale" of personal information. We don't sell personal information.

EU/UK residents: Where GDPR applies, our legal basis for processing is performance of our contract with you, our legitimate interests in operating the Service, and your consent where required. You have the right to lodge a complaint with your local data protection authority.

7. Cookies

Cellcath uses cookies for:

• Authentication (keeping you signed in).
• Security (preventing CSRF attacks).
• Basic functionality (remembering your preferences).

We don't use third-party advertising or tracking cookies.

8. Security

We use industry-standard security practices:

• TLS encryption for all data in transit.
• Encrypted storage for sensitive credentials (OAuth tokens, passwords).
• Role-based access controls (only the systems that need data can access it).
• Row-level security on our database so users can only access their own data.

No system is 100% secure. If we discover a breach affecting your data, we'll notify you promptly as required by law.

9. Children's Privacy

Cellcath is for adult business operators. We don't knowingly collect data from anyone under 18. If you believe a minor has created an account, email mark@marketwithmark.com and we'll delete it.

10. Changes to This Policy

We may update this policy. If changes are material, we'll notify you by email or in-app notice at least 14 days before they take effect.

11. Contact

Questions about your data or this policy? Email mark@marketwithmark.com.

Current Digital Marketing, LLC
12 Mayflower Drive
Cumberland, Rhode Island