Legal · Privacy
Privacy Policy.
Margo Labs (“we”) runs Margo OS. This policy explains what we collect when you use the product, the website, the Directory, and our free tools, and what we do with it.
The short version: we collect what Margo needs to do its job, we don't sell it, we don't train AI on it, and you can ask for deletion anytime, or download your data yourself. See also our Terms of Service.
1. What we collect
Account details. Your email address, your name, and (if you set one) a password, which our authentication provider stores hashed. We never see it.
Your business and your work. Everything you give Margo to do its job: onboarding answers, your website address, documents you upload, brand inputs, strategy, ideas, briefs, drafts, calendar items, outcomes you log, answers to weekly questions, and notes. When you share your website, Margo reads its public pages to understand your business.
Voice input. If you answer onboarding by voice, speech-to-text runs in your browser using its built-in speech recognition. Margo receives only the resulting text, never audio. Some browsers (for example, Chrome) send audio to their own provider to transcribe it. That's covered by your browser's privacy terms, not ours.
Connected tools. If you connect an integration (such as Google Analytics, HubSpot, Stripe, Beehiiv, or a Slack webhook), we store the access it grants (sign-in tokens and API keys are encrypted) and pull the metrics it exposes (for example traffic, customers, revenue, subscribers) to power your Performance view and digests. You can disconnect at any time.
Billing. Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers. We keep your Stripe customer and subscription identifiers, your plan, your rate, your trial dates, and your subscription status.
Directory activity. If you list a business, recommend a vendor, or leave a review, we collect what you submit. Listings and reviews are public by design. If you buy a vendor offer, we record the purchase and the email used at checkout.
Free tools. If you run the Content Audit, we collect the URL you submit and the email you give us, and we send you the results.
Usage and technical data. We log activity inside the product (for example which features ran and when), AI usage for billing, and standard server logs from our hosting provider (such as IP address, browser type, and request times).
2. How we use it
- To run Margo for you: build your Architecture, generate and organize your work, and show your performance.
- To bill you and keep your membership status accurate.
- To send you account and billing emails (trial dates, payments, renewals, cancellations) and, only if you opt in, lifecycle email such as the weekly question.
- To keep the service secure, prevent abuse, and fix problems.
- To understand, in aggregate, which parts of the product are used, so we can improve it.
We don't sell your data, and we don't use it for advertising. We don't use your content to train AI models, and we don't use one member's content to generate another member's output.
3. AI processing
Margo uses Anthropic's Claude models to analyze your inputs and generate drafts, strategy, and suggestions. When a feature runs, the relevant content is sent to Anthropic's API to produce the result. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
AI output can be wrong or incomplete. Review it before you rely on it or publish it.
5. Email
Account and billing emails are part of the service and are always sent. Lifecycle emails (like the weekly question) are opt-in. Every one includes an unsubscribe link, and you can change your choices in Settings → Profile.
Our emails may include a small tracking pixel that tells us whether an email was opened, which helps us know whether important billing emails arrive. Most email apps let you block remote images.
7. How long we keep it
We keep your data for as long as your account exists. If your membership ends, we keep your work for up to 90 days so you can come back to it, and we may delete it after that. Billing records are kept as long as tax and accounting law requires.
You can ask us to delete your account and data at any time by emailing paigeatmargolabs@gmail.com. We'll confirm and complete deletion within 30 days, except for records we're legally required to keep. Public Directory reviews you wrote may be kept in anonymized form.
8. Your choices and rights
You can view and edit most of your information inside Margo, and download a full copy of your data anytime from Settings → Profile → Your data (including after your membership ends). You can also ask us to correct or delete it by emailing paigeatmargolabs@gmail.com. Depending on where you live (for example in the EU, the UK, or California), you may have additional rights, including to object to or restrict certain processing. We'll honor those requests as the law requires, and we won't treat you differently for making one.
9. Security
We protect your data with encryption in transit, row-level access controls so members can only reach their own data, and encryption at rest for integration tokens and API keys. No system is perfectly secure. If a breach affects your data, we'll tell you without undue delay.
10. Where data is processed
Margo is operated from the United States, and our providers process data in the US and other countries. By using Margo, your information will be transferred to and processed in the US, with safeguards our providers offer for international transfers.
11. Children
Margo is a business tool for adults. It isn't directed to anyone under 18, and we don't knowingly collect their information.
12. Changes and contact
If we change this policy in a way that matters, we'll update the date above and tell members by email before it takes effect. Questions or requests: paigeatmargolabs@gmail.com.