Who we are
This page describes how Marsad ("we") handles personal data in the Marsad app store intelligence service. For questions or requests, contact support@example.com.
Account data
We store your name, email address, language and display preferences, your workspace memberships and roles, and invitations (including the invitee email address).
The default way to sign in is a 6-digit code sent by email. The code is valid for 10 minutes and is stored hashed. Sign-in code records (email, hashed code and timestamps) are deleted within about 25 hours. Password sign-in also exists, and passwords are stored hashed. Signing in with a new email address creates your account and a personal workspace.
Cookies and tracking
We do not use advertising or analytics trackers.
IP addresses are used for rate limiting and are not stored with your account data. Error reports go to Sentry, with sending of personal data disabled on the server.
- api_token: an httpOnly session cookie holding your API token, valid for 30 days.
- sidebar_state: a user interface preference, kept for 7 days.
- PARAGLIDE_LOCALE: your language preference, kept for about 400 days.
Public store data
Marsad collects public listings, ratings, reviews (including reviewer display names), keyword search results, top charts and Saudi App Store featuring from the Apple App Store and Google Play. This data is public in the stores and is shared across workspaces.
Connected store accounts
You can connect App Store Connect (key ID, .p8 private key, issuer ID and an optional vendor number). Google Play connections are not available yet and are planned for later.
Everything you provide (issuer ID, key ID, .p8 private key and vendor number) is encrypted at rest with AES-256-GCM. Only the last 4 characters of the key ID are kept readable, along with the issuer ID, which is stored readable as the account identifier, and the account label. We use the connection to fetch sales, subscription, installs and analytics reports and payouts, and to post review replies that you write.
Disconnecting an account deletes the encrypted secret and unlinks its apps, but keeps the account identifier and label (with status revoked) until the workspace is deleted. Sales data already synced stays in the workspace until the workspace is deleted. Disconnecting in Marsad does not revoke the key at Apple, so also revoke it there.
Billing
Polar processes payments. Marsad never sees or stores card numbers. We send Polar the buyer name, email address and a workspace reference. We store the subscription status, plan, interval, period dates and the billing email.
New users get a 14-day Optimize trial with no card, then move to Free. You cancel through the Polar customer portal from the billing page, and cancellation takes effect at the end of the period.
API keys, MCP and alert channels
On the Intel plan, owners and admins can create API keys and authorise MCP clients with read-only scopes: apps, charts, keywords, reviews, sales and alerts. Keys are stored hashed.
Alert channels send alert content to the webhook, Slack, Discord or Microsoft Teams URLs that you configure, or by email to the addresses you enter. Those addresses are stored.
Data export
Workspace owners can request a ZIP of CSV files with the workspace data. It contains no credentials or secrets and no shared public catalog data. The download is available for 7 days and is then deleted automatically. Owners can still export while deletion is pending.
Retention and deletion
Only owners can request workspace deletion, from the billing page. Store credentials, API keys, alert webhook secrets, share links, export download links and pending invitations are revoked immediately, and the subscription is set to cancel at the end of the period. The owner can undo the request within 30 days. Undoing it does not restore what was revoked: reconnect store accounts, recreate API and MCP keys, set up alert webhook channels again, recreate share links, resend invitations and request a new export if you need a download link.
After 30 days the workspace data is permanently deleted: trackers, keywords, alerts, reports, connected accounts, sales data, invitations and related records. Members are removed from the workspace and the Polar subscription is revoked.
Not deleted with a workspace: rank, review and chart history is shared public catalog data and is not tied to a workspace.
What we keep after deletion: billing records (billing customer email, subscription history and add-ons, plan entitlements) for accounting; a de-identified workspace record (renamed and soft-deleted, still referencing its creator and any parent workspace, with the report language, created and updated timestamps, deletion timestamps and the cancelled Polar subscription ID); user accounts, because a user may belong to other workspaces; account change history (name and email changes) for 365 days; and administrative audit records of staff actions on the workspace, kept for security with no fixed deletion period yet. Review replies you already posted remain public in the stores.
There is no self-service personal account deletion yet. To have your account deleted, email us. We first delete the workspaces you solely own, following the 30-day deletion process, and then remove the account. A workspace with child workspaces can be deleted only after its child workspaces are deleted. Activity log entries about your account, such as name and email changes, are kept for up to 365 days.
Other retention: expired dashboard sign-in tokens are pruned daily, sign-in code records are deleted within about 25 hours, activity logs are kept for 365 days, and administrative audit records are not deleted automatically.
Subprocessors
The third parties that handle data for us are listed on the subprocessors page.
Contact
For privacy questions or to request deletion of your account, email support@example.com.