Privacy policy

What we collect

• Account details: your name, email address and password (stored hashed by the sign-in provider; we never see it).
• Your workspace content: projects, files you upload or collect, prepared texts, model results, human coding and reports.
• Service keys you add (such as YouTube, Apify, Claude): kept encrypted in Supabase Vault, never shown again, used only for your own requests.
• Accounts you link yourself (YouTube, X, Meta): encrypted access tokens and the account name only.
• An activity log: who did what and when in a workspace (for example uploading a file or publishing a codebook), for methodological record-keeping.

Why we use it

• To run your account and workspace and do what you ask: collection, preparation, analysis and export.
• To send necessary emails: account confirmation, password reset, and alerts you set up yourself.
• We do not sell your data, show advertising, or use your content to train models.

Where it is kept and who processes it

The database is hosted by Supabase in European data centres. Some services process data on your behalf only, using your own keys:

• Supabase: database, sign-in and encrypted key storage.
• Anthropic (Claude): post texts, when you choose Claude for sentiment analysis.
• Apify, X and YouTube: collection requests you start.
• Resend: emails (confirmations and alerts), when enabled.
• Sentry: technical error reports, when enabled, without post texts or personal data.

Cookies

Marsad uses essential cookies only: your sign-in session, language, light or dark mode, and a short-lived cookie while you link an account. No tracking, advertising or third-party analytics cookies.

Retention and deletion

• Your data is kept while your account exists.
• You can delete any import, coding sample or whole project inside Marsad; everything that depends on it is deleted with it.
• To delete your whole account, email us and we will delete it within 30 days.

Your rights

Under the Saudi Personal Data Protection Law you may access, correct and request deletion of your data, and receive a copy of it (Marsad exports to Excel).

Other people's data in your research

Posts you collect may contain other people's data. You are responsible for using them for legitimate research, under your institution's ethics approval and each platform's terms, and for not publishing anything that identifies individuals without good reason.