Privacy

Who this policy is for

This policy covers the Margin app and use-margin.com, developed by Zander Modaress-Razavi. Contact zandmanv8@gmail.com with privacy questions or requests.

Your account and sign-in

Margin uses your email address, account identifier, sign-in provider, and any name supplied by that provider to identify your account and connect your library. If you add a profile photo or your sign-in provider supplies one, it appears with your name to people collaborating with you. Authentication also uses session tokens and security records, including an authenticator factor if you enable two-factor authentication.

Supabase handles authentication. Account emails, including sign-in codes, are delivered through Resend. Choosing Apple or Google also uses that provider’s sign-in service. Google sign-in requests basic identity information—your identifier, name and email—for account access. Margin does not request access to Gmail, Google Drive or your Google contacts.

Your library and sharing

Boards, notes, drawings, images, audio, files and workspace membership are saved on your device. When you sign in, this content syncs through Margin’s service on Cloudflare so your signed-in devices can use the same library. These services process account and content data to provide authentication, storage and synchronization.

Connections to the hosted account and sync services are encrypted in transit. Margin does not provide end-to-end encryption for your library. Access controls keep your personal library separate from other accounts; workspace invitations give the people you choose access to shared content.

Subscriptions and purchases

Apple handles App Store payments. Stripe processes web payments, including the payment information you enter at checkout. RevenueCat links the web subscription to your Margin account identifier. Stripe and RevenueCat process transaction, billing and subscription information to provide payments and account access. Margin does not receive your payment card details. We use RevenueCat to verify purchases, renewals, refunds and subscription access across your devices. RevenueCat receives your Margin account identifier, purchased product, transaction and subscription information, and technical information needed to process the purchase. We do not send your boards, AI questions, email or profile photo to RevenueCat as customer attributes from the app. Billing contact information entered during web checkout is processed by Stripe and may be shared with RevenueCat through the billing integration.

Purchase information is linked to your account so we can restore access and provide subscription support and understand subscription sales and renewals. We do not use it for cross-app advertising or sell your personal information.

AI and optional connections

AI is optional. Before the first AI request or handwriting recognition, Margin identifies the services receiving data and requires you to choose “Allow AI sharing.” “Not now” keeps your question and lets you continue using boards without AI. You can withdraw permission in Privacy settings. Changes to the permitted recipients require a new decision.

With your permission, your question and relevant canvas context are sent through Margin’s Cloudflare service to Cerebras for AI inference. Context can include handwriting, typed notes, images, document excerpts, earlier questions and answers, and relevant notes or tool results from a workspace you connect. This content may contain personal information you include. Responses you keep become part of your library. Our hosted service verifies your account and, when required, your subscription, and applies short rate limits before forwarding requests.

When public-web research is needed, Exa receives relevant search queries and public page URLs. When public-X research is needed, xAI receives a bounded public search query, which may include a requested author’s name or a public post URL. Search queries can contain personal information from your request. Retrieved public results are shared with Cerebras to answer your question. Public-X research does not access your private X account or send the full canvas, images or conversation history to xAI.

Optional workspace connections can exchange information with the services you connect when you use their tools. Relevant content retrieved through those connections may be sent to Cerebras to answer your question. A custom provider or server connection has its own permission naming that connection and the services you authorize. Permission for the standard Margin services does not authorize an undisclosed provider. Margin’s hosted AI does not require you to supply a personal API key. The services receiving data process it under their applicable terms and privacy practices.

If you connect X bookmarks, Margin requests read-only access to your X account identity and saved bookmarks. Imported post text, attribution, links and media become part of your Margin library and sync with it. X access and refresh tokens stay on the device where you connect; they are not included in your synced boards or exports. Disconnecting stops future access without removing references you already imported.

If you connect Pinterest, Margin requests read-only access to your account, boards and Pins. Margin’s Cloudflare service stores the connection’s authorization credentials encrypted for your account and retrieves your profile, boards and Pins when you browse them. References you choose to import become part of your library and sync with it. Disconnecting removes the stored connection credentials and stops future access; it does not delete references you already imported.

Service diagnostics

This website is hosted by Vercel and uses essential cookies to keep you signed in for billing. We do not add advertising or marketing trackers. Our hosting and authentication services keep operational records, such as failed requests and security events, to run and protect the service. These records can be associated with your account. They are not used for advertising.

Your choices and deletion

Account settings let you manage connected sign-in methods, add an authenticator, sign out, or request account deletion. Deletion requires a fresh sign-in. Margin closes the account and removes its private cloud library; if a service is unavailable, cloud cleanup may continue in the background. The requesting device also attempts to remove that account’s cached library.

Shared workspaces retained by collaborators, exported copies, device backups, offline copies on other devices, and original local data preserved during migration may remain. A minimal closed-account record is retained to prevent reuse of the deleted account’s sync access. Service providers may retain operational records or backups according to their own practices.

Deleting your Margin account does not cancel a subscription billed by Apple or Stripe. Cancel it through the provider that bills you. Apple, Stripe and RevenueCat may retain transaction records for billing, refunds, fraud prevention and legal obligations. Contact support for help with purchase records linked to a deleted account.

If you need help locating or removing remaining data, contact support. Changes to this policy will be published here with an updated date.