Privacy Policy
Effective 18 September 2026. Written to match exactly what the code does — see docs/PRIVACY.md in the source for the technical version of every claim below.
Who is responsible for this data
Mari Cruz Martínez Sanchis (autónoma), operating Margiqo. Contact for any privacy question or request: privacy@margiqo.com.
Two different things happen on this site — only one of them is "your data" to us
Scanning your store's CSV exports never involves us at all. The upload, the analysis, and the result are computed entirely by JavaScript running in your own browser. Your orders export, your product costs, your revenue figures, your SKUs — none of it is ever sent to any server, so we never receive it, never store it, and have nothing to delete, because we never had it. You can verify this yourself: open your browser's network inspector while scanning, or read the source.
Joining early access is the one thing that does send us data — only when you type your email into the form and press submit. Everything below is about that.
What we collect when you join early access
Submitting the early-access form sends, to our own server (a Cloudflare Worker at /api/early-access, nothing on any third party's server):
- Your email address
- The hostname that referred you here, if any (e.g.
google.com) — never the full URL or any query string - Whether you scanned a demo store or your own
- How many leaks the scan found, and whether margin analysis was unlocked (i.e. whether you'd provided product costs) — two numbers, not the underlying data
- Your answer to the optional "what would this be worth to you" question, if you answered it
That is the complete list. The server enforces it independently of the page you're looking at — a bug in the page, or a hand-crafted request, cannot smuggle anything else into storage. Nothing about your store — no SKU, no revenue figure, no order content, no filename — is on this list because none of it is ever sent.
Why we collect it, and on what legal basis
To let you know when automatic Shopify monitoring (the "what's next" feature described on the scan result) becomes available, and — if you answer the optional pricing question — to understand whether it's worth building. The legal basis is your consent: you gave us your email by choosing to submit the form. Nothing is collected before that action, and nothing is inferred or purchased from elsewhere.
Where it's stored
In Cloudflare Workers KV, a storage service belonging to Cloudflare, Inc., which acts as our data processor for this purpose. We use no other data-processing vendor, no analytics platform, and no CRM.
How long we keep it
Until you ask us to delete it, or until the early-access programme this data supports is discontinued — whichever comes first. There is no automatic expiry, because there is no ongoing processing to justify one beyond the purpose above.
Your rights
Under GDPR you can ask us, at any time, to: tell you what we hold about you, correct it, delete it, or stop using it. Email privacy@margiqo.com from the address in question (so we can find and verify the record) and we'll respond within one month. You can also complain to your local data protection authority — in Spain, the AEPD — if you're unhappy with how we handle a request.
No cookies, no trackers, no third parties
This page sets no cookies and loads nothing from any third-party domain — no analytics vendor, no embedded widget, no font CDN (the typeface is served from this same domain specifically so that loading this page doesn't itself leak your IP address to a CDN). The only network request this site ever makes to us is the early-access submission described above.
Children
Margiqo is a business tool for Shopify merchants and isn't directed at children. We don't knowingly collect data from anyone under 16.
Changes to this policy
If what the code actually does changes, this page changes with it — that's the standard we're holding ourselves to. Check the effective date above.