Privacy Policy

MaraJolt collects the minimum data necessary to provide the service. Specifically, we collect:

We do not collect payment card numbers directly — payments are processed by a third-party processor (such as Stripe) that handles card data under their own PCI-compliant systems.

We use the data we collect solely to operate and improve the MaraJolt service:

• Publishing on your behalf: We use your OAuth tokens to post content to your connected social accounts at times you specify.
• AI content generation: Your topic, tone, and goal preferences are sent to the Anthropic Claude API to generate platform-optimized post drafts.
• Scheduling and notifications: We use your scheduled times and approval preferences to send you notifications before posts go live.
• Account management: We use your email to send transactional emails (account confirmation, password reset, important service notices).
• Service improvement: Aggregated, anonymized usage data may be used to improve the product. We do not sell your personal data or use it for advertising.

We will never publish content to your social accounts without either your explicit approval or a schedule you have set up.

MaraJolt integrates with the following third-party services to deliver its functionality. Each operates under their own privacy policy.

We retain your data for as long as your account is active. Specifically:

• Account data: Retained until you delete your account.
• OAuth tokens: Retained while you keep your social account connected. Tokens are invalidated when you disconnect an account from MaraJolt (we set is_active = false and stop using them).
• Post content and history: Retained while your account is active. You may delete individual posts from the dashboard at any time.
• Publishing logs: Retained for 12 months to support debugging and analytics, then automatically purged.

To request deletion of your account and all associated data, email privacy@marajolt.ai with the subject line "Account Deletion Request". We will process your request within 30 days and confirm deletion by email.

MaraJolt uses cookies only as necessary for the service to function:

• Authentication cookies: Supabase sets a session cookie to keep you logged in across page loads. This cookie expires when your session ends or you sign out.
• CSRF state cookies: Short-lived cookies set during the OAuth connection flow (e.g. connecting LinkedIn or X) to prevent cross-site request forgery. These are deleted immediately after the OAuth flow completes.

We do not use advertising cookies, third-party tracking pixels, or analytics cookies that track you across other websites.

We take data security seriously and implement multiple layers of protection:

• All data is transmitted over HTTPS (TLS 1.2+).
• OAuth tokens are stored in a Supabase database with Row-Level Security (RLS) — users can only access their own data.
• The Supabase service role key (used for background jobs) is never exposed to the browser and is only used server-side.
• Passwords are hashed by Supabase using bcrypt before storage — MaraJolt never sees your plaintext password.
• API keys and secrets are stored as environment variables and never committed to source code.

If you discover a security vulnerability in MaraJolt, please report it responsibly to privacy@marajolt.ai.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right of rectification: Request correction of inaccurate data.
• Right of erasure: Request deletion of your personal data (see Section 4).
• Right of portability: Request your data in a machine-readable format.
• Right to object: Object to processing of your data for certain purposes.

To exercise any of these rights, contact us at privacy@marajolt.ai. We will respond within 30 days.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date below. Continued use of MaraJolt after changes constitutes acceptance of the updated policy.