Home  /  Privacy policy marketcat.app

Privacy policy

1. Data controller

The controller of personal data is JFK DESIGN, ul. Wieniawskiego 18, 41-506 Chorzów, Poland, NIP 6271824348 (hereinafter: the “Controller”, “we”).

Contact regarding personal data: support@marketcat.app.

2. Scope of this policy

This policy applies to the following websites and services of the Controller:

  • marketcat.app, including customer accounts, the store, subscriptions and MarketCAT tools,
  • viralcat.pl and app.viralcat.pl, i.e. the ViralCat by Aicat service, which you use through your MarketCAT account.

3. What data we process, for what purpose, on what legal basis and for how long

Account and login

Data: email address, first and last name (if you provide them), password in encrypted form (hash), Google sign-in data (if you choose this method), email address confirmation, technical session data.

Purpose and legal basis: concluding and performing the contract for the provision of electronic services (Art. 6(1)(b) GDPR), securing the account and forms, including Google reCAPTCHA (Art. 6(1)(f) GDPR, legitimate interest: security).

Period: for as long as the account exists and, after its deletion, for the limitation period of any possible claims.

Purchases, subscriptions, payments and invoices

Data: order and billing data (first and last name or company name, address, VAT number (NIP), email, phone number if provided), order and subscription history, payment status.

Purpose and legal basis: performance of the contract (Art. 6(1)(b) GDPR), issuing invoices and tax and accounting obligations (Art. 6(1)(c) GDPR).

Period: for the duration of the contract, and accounting documents for 5 years from the end of the tax year in which the tax obligation arose.

ViralCat service

Data: information you enter in your profile (name or nickname, description, topics, audience, style, goal, sample texts, website, social media profile addresses, country and language), search history, saved inspirations, notes, requested transcriptions, translations and analyses, usage of plan limits.

Purpose and legal basis: provision of the service (Art. 6(1)(b) GDPR).

Period: for as long as the profile or account exists. You can delete the profile in the app or request deletion of your account.

To match inspirations, ViralCat reads publicly available content from the website and profiles you provide (titles, descriptions, available captions). We do not log in to your social media accounts and do not read private content.

Other MarketCAT tools (including the Meta ad auditor, video editor, SEO and GEO, Mcat-MCP, social media publishing, course)

Data: data necessary for the given tool to work, including data provided by connected external accounts if you grant access.

Purpose and legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Period: for as long as you use the tool and the account exists, unless stated otherwise below.

Online consulting

Data: first and last name, email, phone number, date and information provided when booking.

Purpose and legal basis: scheduling and conducting the consultation (Art. 6(1)(b) GDPR).

Period: until the consultation is completed, and then for the limitation period of claims and the period required by tax law if the service was paid.

Contact form, email, WhatsApp

Data: data provided in the message.

Purpose and legal basis: replying to and handling the inquiry (Art. 6(1)(f) GDPR).

Period: until the matter is closed, and then for the limitation period of any possible claims.

Newsletter

Data: email address, history of subscriptions and unsubscriptions.

Purpose and legal basis: sending commercial information based on your consent (Art. 6(1)(a) GDPR and the provisions of the Polish Electronic Communications Law).

Period: until consent is withdrawn, and information about the unsubscription for as long as needed to demonstrate compliance with the law.

Applications to the ViralCat affiliate program (viralcat.pl/afiliacja)

Data: email address, optionally social media profile addresses.

Purpose and legal basis: contacting you about possible cooperation (Art. 6(1)(b) GDPR, steps taken at your request prior to entering into a contract).

Period: up to 12 months from the application, unless we start working together.

Statistics and marketing

Described in section 8. The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law) and, for limited cookieless signals, our legitimate interest in basic measurement of the website's effectiveness (Art. 6(1)(f) GDPR).

Security and claims

We process technical data (IP address, server logs, session identifiers) to protect our websites, detect abuse and establish, pursue or defend claims (Art. 6(1)(f) GDPR), for as long as necessary for these purposes.

4. Public content by other creators in ViralCat

ViralCat searches for publicly available videos on YouTube, TikTok and Instagram that match the topics of the user's profile. In doing so, data of the authors of these materials may be processed: account name, content URL, title, description, thumbnail, public counters (e.g. views, likes, comments), publication date and, at the user's explicit request, also a transcription and translation of what is said.

The source of the data is the public pages of these platforms. The purpose is to show users inspiration for their own content, and the legal basis is our legitimate interest and the users' interest in analyzing publicly available content (Art. 6(1)(f) GDPR). The data is stored in the libraries of the user accounts that found it until the profile or account is deleted. If you are the author of the material, you can object or request deletion of the data by writing to support@marketcat.app.

5. Artificial intelligence (OpenAI)

We use the OpenAI API:

  • in ViralCat: to structure the profile's topics, assess how well materials match, transcribe audio of public videos requested by the user, translate and analyze ideas. Profile content and the text or audio of the analyzed materials are transferred,
  • in the ad auditor: to analyze anonymized statistical campaign data.

OpenAI acts as a processor on our behalf. Under OpenAI's terms, data sent via the API is not used to train models by default. We do not make decisions about you that produce legal effects based solely on automated processing.

6. Data from the Meta platform (ad auditor)

As part of the ad auditor service, the website uses the official Meta Graph API.

  • Scope of data: ad account identifiers, campaign names, spend statistics, performance metrics (CTR, CPC, ROAS) and aggregated event statistics from the Meta Pixel.
  • Purpose: generating an analytical report using artificial intelligence.
  • Sharing: anonymized numerical data (without personal data of end customers) is sent to OpenAI for analysis.
  • Storage: data from the Meta API is not stored permanently after the audit session ends, unless you save the finished report in the customer dashboard.
  • Revoking access: you can disconnect the app with the “Log out” button in the dashboard or remove the permissions of the “MarketCat AI Auditor” app in your Facebook settings (Settings & privacy > Security and login > Apps and websites). To delete data associated with your account, write to support@marketcat.app. We will delete it within 7 business days.

7. Data recipients

Data may be transferred to entities that support us in providing our services, under data processing agreements or as independent controllers:

  • hosting and email: JDM.pl (marketcat.app website, sending emails), Hostinger (ViralCat service server: viralcat.pl and app.viralcat.pl),
  • payments: PayU, Stripe, PayPal, depending on the payment method you choose,
  • invoices: Fakturownia,
  • artificial intelligence: OpenAI,
  • Google: Google Analytics, Google Ads, Google reCAPTCHA, Sign in with Google,
  • Meta Platforms (Meta Pixel and Conversions API), TikTok (TikTok Pixel and Events API),
  • entities providing us with accounting, legal and IT services, to the extent necessary,
  • public authorities, where required by law.

8. Cookies, measurement and marketing

Consent banner. On your first visit, you choose what you agree to. Your choice covers marketcat.app and viralcat.pl (when you move between the websites, we pass it in the link address) and we save it in the cookie aicat_consent for 12 months. You can change it at any time using the cookie settings icon in the corner of the page. Withdrawing consent does not affect the lawfulness of processing before its withdrawal.

Necessary (always active): login, session, cart and checkout, security (including Google reCAPTCHA), remembering your consent choice, page language.

Statistics (with consent): Google Analytics 4 (analysis of traffic and use of the websites, including when moving between marketcat.app, viralcat.pl and app.viralcat.pl) and WooCommerce order attribution files that record the source of the visit. Google Analytics cookies may be stored for up to 2 years.

Marketing (with consent): Meta Pixel, Google Ads and TikTok Pixel, used to measure ad effectiveness, build audiences and match ads on Meta (Facebook, Instagram), Google and TikTok services. Once you give this consent, events (e.g. page view, registration, purchase) may also be sent from our server (Meta Conversions API, TikTok Events API), together with identifiers in hashed form (e.g. email, phone number), to match the event to an account on the given platform. These providers' cookies are stored in accordance with their own policies, for example Meta for up to 90 days.

Google Consent Mode. If you do not give consent, Google tools may send limited cookieless signals (e.g. about a page view), without advertising identifiers. Google may use them for statistical modeling of aggregate results.

Profiling. Based on marketing consent, advertising platforms may link events to your account on their services and match ads. This does not produce legal effects for you.

You can also delete and block cookies in your browser settings, which may limit how the websites work.

9. Transfers of data outside the European Economic Area

Some providers (Google, Meta, TikTok, OpenAI, Stripe, PayPal) may process data outside the EEA, including in the USA. Transfers are based on a European Commission adequacy decision (EU-US Data Privacy Framework, if the provider participates in it) or standard contractual clauses approved by the European Commission. You can obtain a copy of the safeguards by writing to support@marketcat.app.

10. Your rights

You have the right to:

  • access your data and receive a copy of it,
  • rectification of your data,
  • erasure of your data,
  • restriction of processing,
  • data portability,
  • object to processing based on legitimate interest, including marketing,
  • withdraw consent at any time,
  • lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise your rights, write to support@marketcat.app.

11. Voluntary provision of data

Providing data is voluntary but necessary to create an account, conclude a contract and use paid services. Providing invoice data is required by law if we issue an invoice. Consent to statistics, marketing and the newsletter is not a condition for using the websites.

12. Security

We use encrypted connections (SSL/TLS), store passwords in encrypted form, separate account data in the ViralCat service, sign connections between the websites, make regular backups and keep software up to date.

13. Changes to this policy

We update this policy when our services or the law change. The current version is always available on this page.

Last updated: September 17, 2026