1. Two different roles
It is worth separating two situations, because the obligations differ.
For your account data — your name, your email, your business details and your payments — Marten SRL is the data controller.
For the data you upload about your own clients, you are the controller; we are a processor and act on your instructions. We do not use that information for our own purposes and do not analyse it for commercial ends.
2. What data is processed
- Account: name, email address, encrypted password, language and business details (name, RNC, currency, working hours).
- Your clients' data, uploaded by you: name, phone, email, identity document, date of birth, visit history, amounts, advances and debts.
- On plans that include it: documents and images you attach to a client's card, including health information.
- Payments: amount, date, plan and transaction identifier. Card numbers never reach us and are not stored by us.
- Technical records: date, IP address and errors, needed for security and diagnostics.
- Sent emails: recipient, type and delivery result, so that it can be verified whether a message arrived.
3. Why
To provide the service you contracted, to charge for it, to contact you about your account, to comply with legal obligations and to protect the platform from abuse.
We do not send third-party advertising and do not pass your address to anyone for commercial purposes.
4. Who it is shared with
Only with the providers the service needs in order to work, and only to the extent necessary:
- Hostinger — the server where the platform runs and the database is stored.
- PayPal — processing of subscription payments.
- Resend — sending of service emails (address confirmation, password recovery, invitations, trial notices).
- Google (Gemini) — only if you use reading receipts from a photo: the image of the receipt is sent for recognition. This feature is optional and is not applied to client cards or health information.
We may also disclose information where required by a competent authority in accordance with the law.
5. How long
For as long as your account is active. After blocking for non-payment or termination, data is kept for 90 days and then deleted; we will give one week's notice by email beforehand.
Technical records and payment history are kept for as long as accounting and tax rules require.
6. Security
All traffic is encrypted (HTTPS). Passwords are stored encrypted and cannot be read by us. Each organisation is isolated from the others inside the platform.
Files attached to client cards are served only after checking the permissions of whoever requests them. Regular backups are taken.
No measure offers absolute security; should an incident affecting your data occur, we will inform you without undue delay.
7. Your rights
Under Law 172-13 you may access your data, rectify it, request its deletion and object to certain processing, as well as bring a habeas data action.
Inside the platform you can view and correct your data at any time and download it to Excel. For anything else write to mail@marten-solutions.online; we will respond within the periods set by law.
If you are a client of a business that uses the platform and wish to exercise your rights, address that business: it decides about your data. If you write to us, we will pass your request on to them.
8. Cookies
We use only the cookies the service needs to work: the one that keeps you signed in and the one that remembers your chosen language. There are no advertising or cross-site tracking cookies.
9. Contact
Marten SRL, RNC 133698838, República Dominicana. Email: mail@marten-solutions.online.