Last updated: July 21, 2026
This Privacy Policy describes how Shanghai Yuanmao Information Technology Co., Ltd. (上海原猫信息技术有限公司), a company registered in Shanghai, People's Republic of China ("Markus", "we", "us", or "our"), collects, uses, and protects your information when you use the Markus Service.
We collect different types of information depending on how you interact with Markus:
If you join our waitlist or subscribe to our newsletter, we collect your email address. This is used solely to send you product updates, launch notifications, and relevant announcements. You can unsubscribe at any time.
We collect anonymous pageview data (page path, country, referrer) to understand how visitors use our website. We do not use third-party analytics trackers. No personally identifiable information is included in analytics data.
Payment processing is handled by our Merchant of Record, Waffo Pancake. We do not store full credit card numbers or bank account details on our servers. We store billing-related metadata (plan type, billing period, transaction IDs) for accounting purposes.
The Markus Desktop application runs entirely on your local machine. Your projects, agent configurations, conversations, memory, and work outputs remain on your device. The desktop app does not send project data to Markus servers. Optional features like Markus Hub integration, telemetry, and managed tokens require explicit opt-in.
We use your information to:
We do not sell your personal information. Your public profile (username, display name, avatar) and published Items are visible to all users. We may share information when required by law or to protect our rights.
We use the following third-party services:
When using BYOK mode, your API keys are sent directly from the desktop app to the LLM provider. Markus does not store or proxy your API keys through our servers.
This section explains, in plain language, how the managed token service (paid plans) works and how it affects your data.
Please consider the risks before using third-party models. You should carefully evaluate whether to submit any sensitive, personal, confidential, or regulated information to a third-party model, and should fully understand and accept the associated information-security, personal-information-protection, and data-privacy implications. Do not submit content to a model that you are not authorized or willing to share with that third-party provider.
Allocation of responsibility. To the maximum extent permitted by applicable law, including the Personal Information Protection Law (PIPL) of the People's Republic of China: because you determine what content to submit and to which model, and because the model is operated by a third party, you act as the party that decides the purpose and means of processing that content through the third-party provider. Markus's role is limited to operating the client software and the billing layer and to procuring provider access on your behalf. Accordingly, any privacy or security incident that arises from, or in connection with, a third-party model provider's processing of your submitted content is handled under that provider's policies and applicable law, and you assume the risks of using third-party model services. Markus will provide reasonable cooperation and, where a data incident affecting information under our control occurs, will act in accordance with our legal obligations, but Markus does not assume liability for the independent acts or omissions of third-party providers. Nothing in this section removes or limits any rights or protections that cannot be waived under mandatory applicable law.
Your data is stored securely using industry-standard practices. Authentication tokens are stored as HTTP-only cookies. We use HTTPS for all data transmission. Database access is restricted and encrypted at rest.
We retain your account data for as long as your account is active. Waitlist and newsletter email addresses are retained until you unsubscribe or request deletion. Analytics data is retained in aggregate form. Managed-token billing metadata is retained for the period required for accounting, tax, and audit purposes. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.
You have the right to:
To exercise these rights, contact us at support@markus.global.
We use a single HTTP-only authentication cookie (hub_token) to maintain your login session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
Your information may be transferred to and processed in countries other than your country of residence. When you use third-party model providers through the managed token service, your submitted content may be processed in, or transferred to, jurisdictions outside your own by those providers. We ensure appropriate safeguards are in place for transfers of information under our control.
The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn that we have collected data from a child under 13, we will take steps to delete it.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before changes take effect. Changes will be posted on this page with an updated date.
This Privacy Policy is governed by the laws of the People's Republic of China, including the Personal Information Protection Law (PIPL), the Cybersecurity Law, and the Data Security Law.
For privacy-related questions or to exercise your data rights, please contact us: