Brand

PRIVACY POLICY

Posljednje ažuriranje:

Decoration Image
Decoration Image
Decoration Image

1. Introduction

This Privacy Policy explains how Marqethub d.o.o. ("MarqetHub", "we", "us") collects, uses, stores, shares and protects personal data. It covers:

  • our website, https://marqethub.io, and our communication with visitors, clients and job applicants; and

  • the MarqetHub application, our internal software that connects to Google services (Google Ads, Google Tag Manager and Google Analytics) through Google's APIs. The way it handles data obtained from Google is described in section 9, "Google user data".

2. Who is responsible for your data

The data controller is:

Marqethub d.o.o. (Centar IT tržišta)
Pijačna 6, 71000 Sarajevo, Bosnia and Herzegovina
Company ID: 4203505470004
Email: info@marqethub.io
Phone: +387 60 345 2834

3. Data we collect through our website and services

  • Contact details: first and last name, email address and phone number, when you send them to us through a form, by email or through a WhatsApp link.

  • Communications: the content of the messages, enquiries and requests you send us.

  • Job applications: your CV and the other information you include in an application.

  • Technical data: IP address, device type, browser and pages visited. We collect this through cookies and similar technologies (see section 11).

4. Why we use this data

  • Communication: to answer enquiries and to manage projects and client work.

  • Recruitment: to process job applications.

  • Marketing: to send news and promotional messages, only with your consent.

  • Improvement: to understand how our website is used and to improve our services.

  • Compliance: to meet our legal obligations, for example accounting and tax.

5. Legal basis for processing

We process personal data on the following bases:

  • your consent, for example when you click "I agree – continue to WhatsApp";

  • contractual necessity, to provide or prepare a service you have asked for;

  • legal obligation; and

  • our legitimate interests, where these do not override your rights.

6. How long we keep data

  • Clients and enquiries: for the duration of our cooperation or communication.

  • Marketing: until you withdraw your consent.

  • Records required by law: for the periods set by the applicable regulations, for example accounting and tax records.

The retention of data obtained from Google is described separately in section 9.5.

7. Sharing data

We do not sell personal data. We share it only:

  • with technical service providers that process data on our behalf, such as hosting, email and CRM providers;

  • with competent authorities, when the law requires it; and

  • in the event of a business change such as a merger or acquisition, in which case the data remains protected under this policy.

8. Security

We apply appropriate technical and organisational measures to protect personal data. They include access limited to authorised staff, encrypted (HTTPS/TLS) connections and access-controlled accounts. No system is completely secure, but we work to keep the risk as low as possible.

9. Google user data

This section applies to the MarqetHub application. It describes how the application accesses, uses, stores, shares and protects data it receives from Google APIs.

9.1 What the application is

The MarqetHub application is an internal tool that is used only by MarqetHub staff. It is not offered to the public. We use it to report on and manage the Google Ads accounts, Google Tag Manager containers and Google Analytics properties that belong to MarqetHub or that our clients have given us access to. A MarqetHub staff member connects the application by signing in with their own Google account and explicitly granting access on Google's consent screen.

9.2 What Google user data we access

Depending on the permissions granted on the consent screen, the application can access:

  • Google Ads, through the scope https://www.googleapis.com/auth/adwords: account names and IDs; campaign, ad group, ad, keyword, budget and bidding settings; performance metrics such as impressions, clicks, cost and conversions; conversion action settings; and ad policy and approval status.

  • Google Tag Manager, through the tagmanager.* scopes: account and container details, and the tags, triggers, variables and versions inside those containers.

  • Google Analytics, through the analytics.readonly and analytics.edit scopes: account and property configuration, data streams, conversion events, and aggregated website traffic and conversion reports.

The application does not request access to Gmail, Google Drive, contacts or calendar, and it does not request any other Google data.

9.3 How we use Google user data

We use Google user data only to provide the application's own features to the MarqetHub staff member who connected it. Those features are:

  • producing performance reports and analyses of advertising accounts;

  • preparing and making changes to campaigns, ads, keywords, budgets and bids;

  • checking and configuring tracking in Google Tag Manager and Google Analytics; and

  • diagnosing problems, such as disapproved ads or missing conversions.

Before any change that affects advertising spend or settings is applied, a MarqetHub staff member reviews it and approves it.

9.4 Sharing, transfer and disclosure of Google user data

We do not sell Google user data. We share it only in the following cases:

  • With the owner of the account. Reports and analyses about a client's account are shared with that client.

  • With AI service providers. To analyse data and prepare reports, the application processes Google user data using an AI assistant, Claude by Anthropic PBC. Anthropic acts as our service provider. It processes the data only to provide the requested analysis, and it does not use the data to train its models.

  • With competent authorities, when the law requires it.

  • In the event of a merger, acquisition or sale of assets, in which case the data remains protected under this policy.

We do not transfer or disclose Google user data to any other third party.

9.5 Storage, retention and deletion

  • Authorisation token. The OAuth refresh token that lets the application act on the connected Google account is stored only on MarqetHub's own computer, in a file that only the account owner can read. It is not placed in any source code repository. It is kept until access is revoked.

  • Reports and exported data. These are kept only as long as a specific task or client engagement needs them, and are deleted within 90 days after that.

  • Revoking access. You can revoke the application's access at any time at https://myaccount.google.com/permissions. After revocation the application can no longer access your data.

  • Deletion requests. To have us delete Google user data we hold, email info@marqethub.io. We delete the data within 30 days of the request, except where the law requires us to keep it.

9.6 How we protect Google user data

  • All communication with Google APIs uses encrypted HTTPS/TLS connections.

  • Authorisation credentials are stored locally, and only the account owner can read them.

  • Only authorised MarqetHub staff can access Google user data.

  • Access is limited to the scopes listed in section 9.2 and to the purposes described in section 9.3.

9.7 Limited Use disclosure

MarqetHub's use of information received from Google APIs, and its transfer of that information to any other app, will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we do not use Google user data:

  • for serving targeted, personalised, retargeted or interest-based advertising;

  • by selling it, or giving it to data brokers, information resellers or other third parties;

  • for determining creditworthiness, or for lending purposes; or

  • for developing, improving or training generalised or non-personalised AI or machine-learning models.

We do not allow humans to read Google user data except where one of the following applies:

  • we have the user's affirmative consent;

  • it is necessary for security purposes, such as investigating abuse;

  • it is necessary to comply with applicable law; or

  • the data is aggregated and anonymised for internal operations.

10. Your rights

You have the right to:

  • access your personal data;

  • correct your personal data, or have it deleted;

  • restrict or object to its processing;

  • data portability, where applicable; and

  • withdraw your consent at any time, for example by replying "STOP" on WhatsApp or by email.

To exercise any of these rights, email info@marqethub.io. You can also lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (Agencija za zaštitu ličnih/osobnih podataka u BiH).

11. Cookies

Our website uses cookies and similar technologies, including Google Tag Manager, to:

  • make the website work properly;

  • collect visit statistics; and

  • personalise content and ads.

You can disable cookies at any time in your browser settings. This section applies to visitors to our website. It does not apply to the Google user data described in section 9, which is never used for advertising.

12. Changes to this policy

We may update this Privacy Policy. When we do, we will publish the changes on this page with a new "last updated" date. If a change materially affects how we handle Google user data, we will update this policy before the change takes effect.

13. Contact

Marqethub d.o.o.
Pijačna 6, 71000 Sarajevo, Bosnia and Herzegovina
info@marqethub.io · +387 60 345 2834