Skip to Content
Enter
Skip to Menu
Enter
Skip to Footer
Enter
Legal

Privacy Policy

Privacy Policy

Last updated: 17 September 2026

This Privacy Policy explains how Driftless OÜ, trading as Merkion (“Merkion”, “we”, “us” or “our”), collects, uses, stores and shares personal data when you use:

1. Who we are

The controller responsible for the processing described in this Privacy Policy is:

Driftless OÜ
Trading as Merkion
Sepapaja 6
11415 Tallinn
Harju County
Estonia

VAT identification number: EE102884865
Email: chris@merkion.ai

2. Information we collect

Depending on how you use Merkion, we may collect the following categories of information.

Account and authentication information

When you create or use a Merkion account, we may process:

  • your email address;
  • your name or profile information, if provided;
  • account identifiers;
  • authentication and session information;
  • password-reset, email-confirmation and login-related records; and
  • account preferences and subscription status.

Passwords are processed through our authentication provider and are not available to us in plain text.

Content you provide

We process information that you intentionally enter, upload, create, import or save in Merkion. This may include:

  • brand information and business profile information;
  • interview responses;
  • content ideas, drafts, posts, notes and comments;
  • brand maps and other generated materials;
  • uploaded files, images and visual references;
  • connected social-media or third-party account information; and
  • prompts, instructions and other content submitted to Merkion features.

Please do not submit sensitive personal information unless it is necessary for your use of the service.

Browser extension information

The Merkion Browser Capture extension allows a signed-in Merkion user to save a webpage or selected text as a content idea.

When you actively use the extension, it may process:

  • the URL of the active webpage;
  • the webpage title;
  • text that you intentionally select and choose to save;
  • a title or note that you enter;
  • a limited Merkion connection token or identifier required to connect the extension to your account; and
  • technical information needed to complete and secure the request.

The extension processes this information only when you open the extension or intentionally use the “Save selection to Merkion” context-menu command.

The extension does not continuously monitor your browsing activity, record your complete browsing history, log keystrokes, collect passwords, or collect the contents of webpages in the background.

Information captured through the extension is transmitted to Merkion’s backend and saved to your Merkion account as a content idea. Temporary selected text may be stored in your browser’s session storage until it is used or cleared. The extension stores limited connection information locally in the browser so that it can remain connected to your Merkion account.

Payment information

Payments and subscriptions are processed by our payment provider, Stripe. We may receive payment-related information such as:

  • Stripe customer and subscription identifiers;
  • subscription status;
  • purchased plan;
  • transaction status; and
  • billing contact information.

Merkion does not directly store complete payment-card numbers.

Usage and technical information

When you use our website or application, we may collect:

  • IP address;
  • browser and device type;
  • operating system;
  • referring pages;
  • timestamps;
  • application events and feature usage;
  • error and diagnostic information; and
  • cookie or similar-technology identifiers where permitted.

Analytics or other non-essential tracking technologies are used only where legally permitted and, where required, after you have provided consent. Further details are provided in our Cookie Policy.

Communications

If you contact us, we may process your name, email address, message and any other information you include in the communication.

3. How we use information

We use personal data to:

  • create, authenticate and manage Merkion accounts;
  • provide the website, application and browser extension;
  • save user-requested webpage information and selected text as content ideas;
  • generate, organise, analyse and improve content and brand materials;
  • process subscriptions and payments;
  • provide customer support and respond to requests;
  • send account, security and service-related communications;
  • understand product usage and improve reliability and usability;
  • prevent fraud, abuse and security incidents;
  • enforce our terms and protect our legal rights; and
  • comply with legal obligations.

We do not use data collected by the Chrome extension for advertising, creditworthiness, lending decisions or purposes unrelated to the extension’s single purpose.

4. Legal bases

Where the General Data Protection Regulation applies, we process personal data on one or more of the following legal bases:

  • Performance of a contract: to create and manage your account and provide the Merkion services you request.
  • Legitimate interests: to secure, maintain, troubleshoot and improve Merkion, prevent abuse and communicate with users.
  • Consent: where you consent to optional analytics, marketing communications or other processing that requires consent.
  • Legal obligations: where processing is necessary to comply with applicable law.
  • Establishment, exercise or defence of legal claims: where necessary to protect our rights or respond to legal proceedings.

You may withdraw consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn.

5. Chrome Web Store Limited Use disclosure

Information received through the Merkion Browser Capture extension is used only to provide and improve the extension’s user-facing functionality.

We do not sell Chrome extension user data.

We do not use or transfer Chrome extension user data for personalised advertising.

We do not use or transfer Chrome extension user data for determining creditworthiness or for lending purposes.

We do not transfer Chrome extension user data to third parties except:

  • as necessary to provide or improve the extension’s user-facing functionality;
  • for security, fraud prevention or legal compliance;
  • as part of a merger, acquisition or sale of assets, subject to appropriate safeguards; or
  • with the user’s explicit consent.

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements, where applicable.

6. Service providers and recipients

We use service providers to operate Merkion. Depending on the feature you use, these providers may process data on our behalf. They may include:

  • Supabase, for hosting, database services, authentication, storage and backend functions;
  • Vercel, for application hosting and delivery;
  • Webflow, for hosting and delivering the public website;
  • Stripe, for payment and subscription processing;
  • PostHog, for product analytics where enabled and legally permitted;
  • Resend, for transactional and service-related email;
  • CookieYes, for cookie-consent management;
  • infrastructure, security, monitoring and customer-support providers; and
  • artificial-intelligence service providers when you intentionally use AI-powered Merkion features.

We provide service providers only with the information reasonably necessary to perform their services. They are contractually or legally required to protect the information they process.

Information may also be disclosed where required by law, to protect rights or safety, to investigate fraud or abuse, or in connection with a corporate transaction.

7. International data transfers

Some service providers may process information outside Estonia or the European Economic Area.

Where required, we use appropriate safeguards for international transfers, such as European Commission Standard Contractual Clauses, adequacy decisions or other legally recognised transfer mechanisms.

8. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In general:

  • account information is retained while your account remains active;
  • content saved in Merkion, including content captured through the browser extension, is retained until you delete it or your account is deleted;
  • extension connection information remains in the browser until you disconnect the extension, clear browser data or the connection is revoked;
  • temporary browser-session information is removed when it is used, cleared or the relevant browser session ends;
  • billing and transaction records may be retained as required by tax, accounting or other laws; and
  • security logs and backups may remain for a limited period after deletion.

When information is no longer required, we delete or anonymise it unless continued retention is required by law or necessary for legal claims, fraud prevention or security.

9. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No online service can guarantee absolute security. You are responsible for keeping your account credentials secure and for notifying us if you suspect unauthorised access to your account.

10. Your rights

Depending on your location, you may have the right to:

  • access personal data we hold about you;
  • correct inaccurate or incomplete information;
  • request deletion of your information;
  • restrict or object to certain processing;
  • receive certain information in a portable format;
  • withdraw consent;
  • object to direct marketing; and
  • lodge a complaint with a competent data-protection authority.

To exercise your rights, contact chris@merkion.ai. We may need to verify your identity before completing a request.

You may also delete individual content items through Merkion where that functionality is available.

11. Account deletion

You may request deletion of your Merkion account and associated personal data by contacting chris@merkion.ai.

Some information may be retained where required for legal, accounting, fraud-prevention, security or dispute-resolution purposes.

12. Children’s privacy

Merkion is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe that a child has provided personal data to us, please contact us so that we can investigate and delete it where appropriate.

13. Third-party services and links

Merkion may contain links to third-party websites or allow you to connect third-party services. Those services operate under their own privacy policies, and we are not responsible for their independent privacy practices.

Connecting a third-party service is optional. We process information received through a connection only as necessary to provide the functionality you request.

14. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to Merkion, our service providers or applicable law.

The “Last updated” date at the top shows when this Privacy Policy was most recently revised. Where required, we will provide additional notice of material changes.

15. Contact

For questions, privacy requests or complaints, contact:

Driftless OÜ
Trading as Merkion
Sepapaja 6
11415 Tallinn
Harju County
Estonia

Email: chris@merkion.ai
VAT identification number: EE102884865

‍