White-Label Privacy Policy
How personal information works on the white-label platform — for agencies, and above all for their clients, whose trust every agency's business is built on.
An agency's clients are that agency's customers. Their information lives inside that agency's tenant, is never shared with other tenants or agencies, is never sold, and is processed by Marvic AI only to run the platform.
1 Who is who
Three roles matter in this policy:
- Marvic AI operates the platform — the engine, hosting and console — and processes tenant data on behalf of agencies in order to run it.
- Agencies run their own branded service on the platform. Each agency decides what its service does, sets its own prices, and is responsible to its clients for their information.
- Clients and end users are the businesses an agency serves, and those businesses' own customers — the people who call, chat, book and buy through an agency-branded service.
When this policy says "tenant data," it means everything inside one agency's separated space on the platform: the agency's account, its client businesses, and those businesses' customer interactions.
2 Tenant isolation
Every tenant is isolated — technically and organisationally. An agency's admins and users see only their own tenant. No agency can see, search or reach another agency's clients, data or results, and Marvic AI does not use one agency's data to benefit another.
Marvic AI personnel access tenant data only where it is needed to operate, secure or support the platform, and that access is limited to authorised staff.
3 What the platform processes
- Account information — names, email addresses and sign-in details for agency admins and business users.
- Business content — the information agencies and their clients put into the platform: business profiles, knowledge bases, contact lists they lawfully hold, and service settings.
- Customer interactions — calls, chats, messages, bookings and enquiries handled by the platform on a business's behalf, including recordings and transcripts where the business has enabled them.
- Operational records — usage, billing events and technical logs needed to run, secure and improve the platform's reliability.
4 How tenant data is used
Tenant data is processed for one purpose: running the platform for the tenant it belongs to. That means delivering the service the agency sold, keeping it secure, providing support, maintaining records of what the platform did (so results can be shown and improved), and meeting legal obligations.
We never sell personal information. We never use an agency's client data to market Marvic AI to those clients, and we never build advertising profiles from tenant data.
5 Service providers
Running the platform involves a small set of specialist providers in categories such as cloud hosting, telephony, AI model processing, email delivery and payment processing. Each receives only the data its function requires, under contractual obligations to protect it and to use it only for that function.
A current list of the specific providers we use is available from our Privacy Officer on request.
6 Storage and security
Platform data is stored in Canada. Data is encrypted while it moves between systems, access to it is controlled by role-based permissions and individual accounts, and the platform is backed up so service can be restored if something fails.
No system is perfect, and we do not pretend otherwise — but isolation between tenants, least-privilege access and encryption in transit are the baseline every tenant gets, not an upgrade.
7 Retention and deletion
Tenant data is kept while the agency's tenant is active, so the agency and its clients can see their history and progress. When an agency's participation ends, its tenant data is available for export during the notice period in its Agency Agreement and is then deleted from production systems, with backups rolling off in the ordinary backup cycle.
8 Rights of clients and end users
If you are a client of an agency — or a customer of one of their businesses — your relationship is with that agency or business. Requests to see, correct or delete your personal information should go to them first: they are the ones who can act on it in their tenant, and we support them in fulfilling requests.
You can also contact our Privacy Officer directly at any time, and we will route the request to the right agency and confirm it was passed on.
9 This page and cookies
This public page (wl.marvic.ai) sets no tracking cookies and runs no advertising or analytics trackers. The agency console and client dashboards use only the cookies and similar storage needed to keep users signed in and the service working.
10 Changes and contact
If this policy changes in a way that matters, agencies are notified through the console or by email before the change takes effect. The version in force is the one published here.
Privacy questions and requests: our Privacy Officer can be reached at hello@gapsa.io.
The short version: your clients are yours. Their data stays inside your tenant, is never shared across tenants, never sold, never used to market to them — and it is stored in Canada.