Privacy Policy

1. Who we are

Markaba AI ("Markaba AI", "we", "us", "our") operates markabaai.com and the Markaba AI application (app.markabaai.com). The operating legal entity is in the process of being incorporated in the United Arab Emirates; until incorporation is complete, references to "we" or "us" mean the founding team operating under the Markaba AI brand.

2. What we collect

On markabaai.com

markabaai.com is a static, informational site with no sign-up form. It uses Google Analytics (GA4) to understand how visitors use the site — pages viewed, general location, device/browser type, and referral source — which sets cookies as part of that measurement; see §3 below. The only other data generated by visiting this site is standard web server access logs kept by our hosting provider (e.g. IP address, browser user-agent, requested page, and timestamp), used solely to operate and secure the server and diagnose problems.

In the application

Using the application at app.markabaai.com involves more data, because it is a working product rather than an informational page:

• Account data — name, email, and authentication identifiers, handled by our authentication provider (Clerk) when you sign up or sign in.
• Vehicle and garage data — the vehicles you add, their service history, and any photos or descriptions you provide for diagnosis.
• Diagnostic chat data — the symptoms, questions, and vehicle context you enter into the AI assistant, which is sent to our AI processing provider (Anthropic's Claude API) to generate a diagnosis, part match, and quotation.
• Order, payment, and booking data — parts and service orders, booking details, and payment transactions. Payments are processed by a third-party payment service provider; we do not store your full card details ourselves.
• Communications — order/booking confirmations and provider notifications sent by email, SMS, or WhatsApp through our messaging providers.
• Usage analytics — which screens you open and which actions you take (adding a vehicle, running a diagnosis, making a booking, and which provider was booked). If you have allowed analytics cookies and are signed in, this includes an internal account identifier, so that one person using a phone and a laptop is counted once rather than twice. It never includes your name, email address, phone number, registration plate, or the content of your diagnosis. See §3.

3. Cookies

markabaai.com uses Google Analytics (GA4), which sets cookies to distinguish visitors and measure site usage as described in §2 — no advertising or cross-site tracking cookies are used. The application uses the session cookies/tokens our authentication provider (Clerk) needs to keep you signed in.

The application at app.markabaai.com uses a separate Google Analytics property for the same purpose. When you have allowed analytics and are signed in, measurement there is linked to a pseudonymous internal account identifier — not your name or email address — so that repeat visits from your different devices are recognised as one person rather than several. Declining analytics, withdrawing that consent later, or signing out all stop that identifier being sent.

Analytics cookies are off until you allow them. You are asked once, on your first visit, and nothing is stored on your device before you answer. You can change your mind at any time — manage cookies — and the same control is in the app under Settings. Declining does not affect anything else on this site.

4. Third-party processors

We rely on third-party services to run the application, each processing only the data needed for its function: an authentication provider (Clerk) for sign-in, a payment service provider for transactions, an AI provider (Anthropic) for diagnostic processing, messaging providers for email/SMS/WhatsApp notifications, and our hosting provider for the servers and database. Google Analytics provides the usage measurement described in §2 and §3, as two separate properties — one for markabaai.com and one for the application. Visiting a link to a destination outside markabaai.com or the application is subject to that destination's own privacy practices, not this policy.

5. Data retention

markabaai.com's server access logs are retained only as long as needed for security and operational purposes. Application data (accounts, vehicles, orders, bookings) is retained for as long as your account is active, or as needed to satisfy legal, tax, or dispute-resolution obligations after that.

6. Your rights

If you are in the UAE or another jurisdiction with data protection rights, you may contact us with any question or request about the data described in this policy — including access, correction, or deletion of your account and application data. For markabaai.com alone, most such requests will not apply beyond incidental server logs, since it collects no personal data of its own.

Two of those rights are self-service in the application, under Settings → Account & data: Download my data exports every record your account touches, and Delete my account erases it. Deleting your account sets out both routes — including how to ask by email if you cannot sign in — and exactly what is erased, what is kept in anonymised form, and why.

7. Changes to this policy

We may update this Privacy Policy as the site and application evolve. The "Last updated" date at the top of this page reflects the most recent revision.

8. Contact

Questions about this policy can be sent to hello@markabaai.com.