1. Who is responsible
The hosted services are operated by TNEP (SARL, SIREN 934828542), 540 Premiere Avenue, 06600 Antibes, France, which is the data controller for the personal data described below. Full company details are on our legal notice.
The open source canvas is a separate thing with a separate answer: it is a free software project written by Nicolas Touron and licensed under Apache 2.0. It has no account and collects nothing, so no controller is involved at all.
For any question about this policy or your data, write to privacy@marver.design.
2. What this policy covers
Marver comes in two parts, and they are very different from a privacy point of view.
- The open source canvas - the tool you install with npm and run on your own machine, and any canvas you publish and host yourself. It has no account, sends us no telemetry, and never transmits your frames, files or comments to us. If this is all you use, we hold no personal data about you whatsoever.
- Marver accounts and hosted services - signing in at
id.marver.designorapp.marver.design, being invited to somebody's canvas, or using anything we host for you. Only this part of Marver processes personal data, and only this part is described below.
The source code for the canvas is public, so this separation is verifiable rather than a promise: read it on GitHub.
3. What we collect, and why
If you create a Marver account
- Your email address - it is your identity on Marver and how we send you sign-in codes. Legal basis: performance of a contract (Article 6(1)(b)).
- Your name and profile picture, only if you choose to sign in with Google, and only so that people you collaborate with see a person rather than an address. Legal basis: performance of a contract.
- Sign-in and security records - session times, approximate location derived from IP, and which canvases you granted access to. Legal basis: our legitimate interest in keeping accounts secure (Article 6(1)(f)).
If somebody invites you to a canvas
When an owner grants access to a canvas, they give us the email address they want to invite, and we send that address one invitation. We receive it from them rather than from you, which is why this notice also serves as the information required by Article 14 - and why we keep that use narrow: an invitation, and any later notification about that canvas. Nothing else.
If you use a canvas somebody else hosts
The owner of that canvas decides who may open it and can see the comments you leave on it. For their canvas, they are the controller and we are not. We only ever tell their canvas that a verified email address matched an entry on their invite list.
4. What we never do
- We never sell or rent personal data, and we never share it with advertisers or data brokers.
- We never add you to a marketing list because somebody invited you. An invitation is a transactional email. Marketing email only ever goes to people who have separately and explicitly asked for it, and every such message can be unsubscribed from in one click.
- We never read your work. Frames, documents, designs and code stay on your machine and in your repository.
- We ship no AI and we train no models. The agent that acts on your canvas is the one you already run, under your own subscription. Your content is never sent to us for training, evaluation or any other purpose.
5. Google user data
If you choose "Continue with Google", Google tells us your email address, your name and your profile picture, after you approve it on Google's own consent screen. We ask for nothing else - no access to Gmail, Drive, Calendar, contacts, or any other Google service.
Marver's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to create and operate your Marver account. We do not transfer it to others except as needed to provide the service, we do not use it for advertising, and no human reads it except where required for security or support you have asked for.
You can disconnect Marver at any time from your Google account permissions, and delete your Marver account as described below.
6. Who else touches the data
We keep the list of suppliers deliberately short. Each one processes data only on our instructions, under a data processing agreement.
- Railway - hosting and the database that stores accounts and access grants.
- Resend - delivery of sign-in codes and invitations.
- Google - only if you choose to sign in with Google.
Some of these operate outside the European Economic Area. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
7. How long we keep it
- Account data - for as long as your account exists, and deleted within 30 days of you deleting it.
- Sign-in codes - minutes. They expire quickly and are single use.
- Unaccepted invitations - expire automatically, and the address is deleted with them.
- Security logs - up to 12 months, then deleted.
8. Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another service in a portable format. You can also withdraw consent wherever we rely on it, without affecting what came before.
Write to privacy@marver.design and we will answer within one month. If you are not satisfied, you may complain to your local supervisory authority - in France, the CNIL.
10. Children
Marver is a tool for professional work and is not directed at children under 16. We do not knowingly collect their data; if you believe a child has created an account, write to us and we will delete it.
11. Changes to this policy
If we change this policy in a way that materially affects you, we will say so by email to account holders before it takes effect, and the date at the top of this page will change. Questions, always, to hello@marver.design.