Privacy Notice

1. Controller and contact

The controller is Marragon Consulting LDA, Rua Principal 171, 2785-075 São Domingos de Rana, Portugal, VAT PT516115340. For privacy requests or questions, contact info@marragonconsulting.com.

This notice applies to MarginVisibility, a SaaS service for analysing ecommerce sales, inventory and cost data.

2. Data we process

We process account and authentication details, organisation and membership details, billing identifiers and invoice details, support correspondence, security and audit records, and the business files and data submitted to the service. We also generate analysis results, exports and source-evidence records from submitted data.

We receive most data from the account holder or authorised members. Billing information is received from Stripe; authentication, storage and infrastructure data is processed through our service providers.

3. Purposes and legal bases

We process data to provide and secure the service, administer accounts and organisations, perform a contract, process subscriptions and invoices, respond to support requests, prevent abuse, comply with legal obligations, and establish, exercise or defend legal claims.

Where processing is not necessary for the contract or a legal obligation, we rely on our legitimate interests in operating a secure, reliable service, subject to your rights. We do not use optional advertising, behavioural analytics or AI insights in the production service.

4. Recipients and international transfers

Access is limited to authorised personnel and to service providers needed to operate the service, including Supabase for database, authentication and private storage; Cloudflare for application delivery and security; Stripe for billing; and Microsoft Graph/Exchange for transactional email. Those providers may process data on our instructions or as independent controllers for their own services, as applicable.

Where personal data is transferred outside the EEA, we will use a transfer mechanism required by applicable data-protection law. Provider-specific data-processing and transfer information is available from the relevant provider and may be requested from us. We do not sell personal data.

5. Retention and deletion

Cancelling a paid subscription stops its automatic renewal and ordinarily moves the account or organisation to the Free plan at the end of the paid period. Cancellation alone does not automatically delete customer data. Data remains subject to the applicable Free-plan functionality and our retention and deletion rules. A separate verified request to delete an account or organisation is handled through the applicable deletion procedure, with export opportunities where supported and subject to legal retention obligations.

Legal, tax, security, fraud-prevention and dispute records may be retained for the legally applicable period or while a claim, investigation or hold requires it. Encrypted recovery backups are limited to 15 recovery points and are routinely retained for no more than 30 days, subject to an approved legal hold or recovery necessity.

6. Your rights

Subject to applicable law, you can request access, rectification, erasure, restriction, portability or objection, and can ask for information about our processing. Send requests to info@marragonconsulting.com; we may request proportionate information to verify identity and authority. We normally respond within one month, or explain any lawful extension or refusal.

You may lodge a complaint with the Portuguese data-protection authority, Comissão Nacional de Proteção de Dados (CNPD), or with the supervisory authority where you live or work. We do not make solely automated decisions that produce legal or similarly significant effects about you.

7. Cookies and security

MarginVisibility uses strictly necessary authentication, security and preference storage needed to operate the service. It does not use optional cookies, advertising cookies or behavioural analytics. You can review the necessary-cookie preference control in the site footer.

We use access controls, tenant isolation, encryption and monitoring designed to protect data. No system can be guaranteed completely secure; please use strong credentials and keep account access confidential.

8. Changes

We may update this notice when our processing or legal obligations change. Material changes will be published here with a revised effective date. Contact info@marragonconsulting.com for the current version.