Privacy Policy

This Privacy Policy explains how Denvo LLC ("Denvo", "we", "us") collects and uses personal information when you visit the Marnis website, create an account, or use Marnis. Marnis is a personal notes and relationship app: you write notes, record people and places, and connect them into your own knowledge archive.

Marnis is operated by Denvo LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States. This policy is written with the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) in mind and also covers visitors from other regions. By using Marnis you also agree to our Terms of Service.

1. Information we collect

Account data: when you sign up or accept an invitation, we store your email address, your name, a password hash, and authentication session metadata managed through Supabase Auth, together with your workspace membership and personal settings.

Content you create: everything you record in Marnis - notes, the people, companies, places, and interests you enter, the links between them, reminders, visibility settings, and your chats with the assistant. Your notes can contain information about other people, such as the name, employer, or interests of someone you know. You decide what you write down.

Waitlist data: if you enter your email address on our waitlist page, we store that address and the date of the entry, and nothing else. We use it solely to contact you about access to Marnis, and we delete it on request.

Technical data: our hosting providers record server logs including IP address, request headers, and timestamps for security and operations.

Support data: if you contact us, we process the content of your message and your contact details to answer your request.

In the categories of the CCPA, this information consists of identifiers (name, email address, IP address), internet activity (server logs), and the content you choose to create. We do not collect precise geolocation, biometric information, or purchase histories, and we do not run analytics or advertising trackers.

2. How we use your information

• to create and manage your account and sign you in securely,
• to store, display, search, and connect the content you create,
• to answer your questions in the assistant chat, as described in section 3,
• to secure the service, prevent abuse, and debug problems,
• to respond to your support requests, and
• to comply with legal obligations.

We do not use your information for advertising, and we do not build advertising profiles. Marnis shows no ads.

3. The assistant and AI processing

Marnis includes a chat assistant. When you ask it a question, the text of your request and the excerpts of your content needed to answer it - which can include your notes and the names of people in them - are sent to an external language model provider, currently Mistral AI, to generate the answer. The provider is contractually restricted to processing this content for us, and your content is not used to train models.

The assistant only runs when you use the chat. If you do not use it, your content is not sent to the model provider.

4. Cookies and local storage

We use only cookies the service cannot work without: the Supabase authentication session cookies that keep you signed in, and one cookie that records which workspace you last worked in (marnis_workspace). We do not set analytics or tracking cookies. Your browser stores one local storage entry with your light or dark theme preference; it contains no identifier and is never sent to any third party.

5. Service providers and where your data is stored

We share personal information with service providers only as needed to operate Marnis, under contracts that restrict how they may use it. The current list is:

Your account data and content are currently hosted on Vercel and Supabase in the Singapore region. If we move hosting to another region, we will update this policy.

Beyond these providers, we may disclose information where required by law, to enforce our terms, or as part of a merger or acquisition, in which case this policy continues to apply.

6. We do not sell or share your information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined by the CCPA. We have not done so in the preceding 12 months. We also have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.

7. Your privacy rights

If you are a California resident, the CCPA/CPRA gives you the right to:

• know and access the personal information we have collected about you,
• delete personal information we have collected from you,
• correct inaccurate personal information,
• opt out of the sale or sharing of personal information - we do not sell or share personal information, so there is nothing to opt out of, and
• non-discrimination: we will not treat you differently for exercising any of these rights.

To exercise these rights, email privacy@marnis.co from the email address associated with your account. We use that address to verify that the request comes from you; if you use an authorized agent, we may ask for proof of authorization. We respond within the timelines the law requires.

Residents of other US states with similar privacy laws, and users outside the United States, can use the same address for access, correction, and deletion requests, and we will honor them in accordance with applicable law.

8. Other people in your notes

Marnis is a personal tool, and your notes can mention people who do not use Marnis. What you record about others is your content and your responsibility; keep it to what you would be comfortable with the person knowing you wrote down. If you believe someone has recorded information about you in Marnis and you want it corrected or removed, email privacy@marnis.co and we will handle the request in accordance with applicable law.

9. Retention, deletion, and export

We keep your account data and content for as long as your account exists. Operational logs are retained only as long as needed for security monitoring and debugging and are then deleted or anonymized.

You can delete individual notes, contacts, and chats in the app at any time. To delete your entire account, or to receive a copy of your data in a machine-readable format, email privacy@marnis.co from your account email address. There is currently no self-service button for account deletion or export in the app; we carry out these requests for you and confirm when they are done.

10. Security

We protect personal information with HTTPS/TLS in transit, encryption at rest, server-side authorization checks on every request, and strict separation between the data of different users. No service can guarantee perfect security; keep your password safe and use a password you do not use elsewhere.

11. Children

Marnis is not directed at children, and we do not knowingly collect personal information from children under 13, as defined by the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has created an account or provided us personal information, email privacy@marnis.co and we will delete it.

12. Changes to this policy

We may update this policy as the service, our providers, or legal requirements change. We will post the updated version on this page with a new "Last updated" date and, for material changes, notify you in the application or by email where appropriate.

13. Contact

For privacy requests and questions about this policy, contact: privacy@marnis.co. Postal address: Denvo LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States.