Privacy Policy

Markwell is a brand operated by Mario Perez, with tax domicile in San Jose, Costa Rica. We act as the data controller for personal data received through markwell.ai and the API at api.markwell.ai.

When you contact us: name, work email, company, role, and the message you choose to share.

When you use the API: applicant, policy, or claims data you submit in scoring, antifraud, or portfolio-analytics payloads. Each customer decides which fields to send.

Technical data: IP address, user agent, timestamps, and API usage logs needed to operate the service.

To respond to your commercial inquiry and schedule conversations.

To process API calls and return scores, alerts, or reports.

To improve our models. Each customer has its own model trained on its data. We do not combine data across customers nor use it to train shared models.

To comply with legal and contractual obligations.

Costa Rica Law 8968: we process data with your informed consent, in performance of a contract, to comply with legal obligations, or based on a proportionate legitimate interest.

GDPR for EU visitors: art. 6(1) letters a, b, c, and f as equivalent lawful bases.

We do not sell personal data.

Sub-processors that may handle data on our behalf: Amazon Web Services (infrastructure, us-east-1 region) and Resend (transactional email). Each is governed by a data processing agreement.

Leads and commercial inquiries: up to 24 months after the last contact.

Data sent to the API: for the term of the contract and up to 12 months after, unless a longer legal retention applies.

Technical logs: up to 12 months for security and debugging.

You have rights of access, rectification, deletion, objection, restriction, and portability over your personal data. To exercise them, email mario.perez@markwell.ai. We respond within 30 days at most.

If you reside in the EU, you have the right to lodge a complaint with your supervisory authority. In Costa Rica, the competent authority is Prodhab (Agencia de Proteccion de Datos de los Habitantes).

Traffic encrypted in transit with TLS 1.2 or higher. Certificates managed by AWS Certificate Manager. System access restricted by roles and multi-factor authentication. We do not store payment card data.

Our production infrastructure runs on AWS region us-east-1, United States. For EU visitors, transfers rely on the Standard Contractual Clauses approved by the European Commission.

We currently do not use analytics or advertising cookies. We use a functional cookie `NEXT_LOCALE` to remember your language preference. If we enable analytics in the future, we will update this policy and add a consent banner when the law requires.

We update this policy when our practices or applicable regulation change. The last-updated date appears at the top of the document. Material changes are notified to active customers by email.

Mario Perez, data controller. San Jose, Costa Rica. mario.perez@markwell.ai.