Privacy Policy

Margo is operated by That Marketing Club. This policy explains what information Margo collects, how it’s used, and the choices you have. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.

1. What we collect

Account details — your name and email address, used to log you in (via one-tap magic links) and match you to an active That Marketing Club membership.

Your brand & content — the business details, brand voice, offers, and content you create or store in Margo. This is your material; we hold it only to run the Service for you.

Instagram data (optional)— if you choose to connect your Instagram account, we access your own account’s performance data through Meta’s API to show you your analytics. We never post on your behalf and we never access anyone else’s private data.

Usage information— basic counts of how much you use Margo’s AI features, so fair-use limits work.

Payment details— we don’t collect or store them. Billing happens through That Marketing Club’s membership platform, and card details are handled by its payment provider, never by Margo.

2. How we use it

To run Margo: generate content in your brand voice, show your analytics, send you login links and the planning-reminder emails you’ve opted into, keep the Service reliable, and help you when you contact support. That’s it — we don’t sell your data, we don’t share it with advertisers, and we don’t use your content for anything other than serving you.

3. Who processes it for us

Margo runs on trusted providers who process data on our behalf: Supabase (secure database and login), OpenAI (generates your content — under our API terms your inputs aren’t used to train their models), Meta (only if you connect Instagram), Resend (sends our emails), and Vercel (hosting). Each provider only receives what it needs to do its job.

4. How long we keep it

For as long as you have a Margo account. If your membership ends, your brand guide and content stay safe so you can pick up where you left off if you return — unless you ask us to delete them.

5. Your choices & rights

You can disconnect Instagram at any time from inside Margo, unsubscribe from reminder emails in one click, and ask us to access, correct, or delete your personal information whenever you like. Deletion requests — including Instagram data — are explained on our data deletion page and are actioned within 30 days.

6. Security

Your data is stored securely, encrypted in transit, and protected by row-level access rules so members can only ever see their own data. Sensitive credentials (like Instagram access tokens) are stored encrypted.

7. Changes

If we update this policy, we’ll change the date at the top. Meaningful changes will be flagged to members directly.

8. Contact

Questions, or want to make a privacy request? Email hey@thatmarketingclub.com.