Privacy Policy
Effective July 18, 2026
Merkado is a curated marketplace for launch-ready AI and business app templates, operated by NeuroLoop LLC ("Merkado," "we," "us," or "our"). This Privacy Policy explains, in plain language, what personal data we collect when you use merkado.ai and the Service, how we use it, who we share it with, and the choices you have. By using the Service, you agree to this policy.
01 What this policy covers
This policy covers personal data we collect through the Merkado website and product. It does not cover third-party services that have their own privacy policies, such as Stripe (payments) or the external services that individual templates may connect to. When you leave Merkado or use one of those services, their policies apply.
02 Personal data we collect
We collect: account information (your email address, and a name if you provide one); authentication data (we sign you in with a one-time email link, so we do not store passwords); purchase records (what you bought and when, with payment processing handled by Stripe, which shares limited details such as the last four digits of your card and payment status); maker payout and tax information (if you sell on Merkado, handled through Stripe Connect); communications you send us (such as support requests and reviews); newsletter signups (if you subscribe); and device, usage, and log data (such as IP address, browser type, and pages viewed) collected automatically to operate and secure the Service.
03 How we use personal data
We use personal data to: provide the marketplace and your account; process orders and deliver your downloads; pay makers and handle related tax reporting; send transactional messages (such as order confirmations and sign-in links) and, if you opt in, newsletters; respond to support requests; detect and prevent fraud, abuse, and security incidents; improve the Service; and comply with legal obligations. We do not sell your personal data, and we do not use it for third-party advertising.
04 Cookies and analytics
We use essential cookies that keep you signed in and keep the site secure. We do not use advertising or cross-site tracking cookies, and we do not track you across other websites. To understand how the Service is used and to improve it, we use first-party product analytics from PostHog, a service provider that processes this data on our behalf. This uses first-party cookies and local storage on your device to measure usage, and it includes session recordings that capture how pages are used. These recordings automatically mask anything you type into forms and hide sensitive details such as email addresses. We do not sell this information and we do not use it for advertising. If your browser sends a Do Not Track signal, we do not collect this analytics.
05 How we share personal data
We share personal data only as needed to run Merkado. We rely on modern, reputable, and secure infrastructure, and on a small number of trusted service providers who process data on our behalf under contract for purposes such as hosting the site, processing payments, storing files, sending email, and product analytics. We require these providers to safeguard your data and to use it only to provide their services to us. If you buy a third-party maker's template, we share only the limited information needed to operate the marketplace (for example, that a sale occurred and any review you leave); we do not share your payment card details with makers. We may also disclose personal data to comply with the law, enforce our Terms, protect the rights and safety of our users or Merkado, or in connection with a merger, acquisition, or sale of assets.
06 Data retention
We keep personal data while your account is active and as needed to provide the Service. If you close your account, we delete your personal data within 30 days, except where we must keep certain records longer to meet legal, tax, accounting, or fraud-prevention obligations (for example, transaction records).
07 Data security
We protect personal data with encryption in transit and at rest, access controls, and modern, reputable infrastructure. Payment card data is handled directly by Stripe, and Merkado never stores full card numbers. No method of storage or transmission is completely secure, but we work to protect your information and to respond promptly to any incident.
08 Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can unsubscribe from newsletters at any time using the link in the email. To exercise any of these rights, email us at hello@merkado.ai and we will respond as required by law. If you are in the European Economic Area or the United Kingdom, we process your data under the applicable data protection laws (GDPR). If you are a California resident, you have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them; note that we do not sell or share personal data as those laws define it.
09 Children
Merkado is not directed to children, and you must be at least 18 to use the Service. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it promptly.
10 International users and transfers
Merkado is operated from the United States, and your personal data is processed and stored in the United States and by our service providers. If you access the Service from outside the United States, you understand that your data will be transferred here, and where required we rely on appropriate safeguards such as standard contractual clauses.
11 Changes to this policy
We may update this Privacy Policy from time to time. For material changes, we will provide reasonable notice (for example, by email or a notice on the site) before they take effect. The "Effective" date at the top shows when this version was last updated.
12 Contact us
Questions about your privacy or this policy? Email us at hello@merkado.ai.