Privacy Policy

1. About This Policy

This policy covers two distinct contexts:

• Our website — the publicly accessible informational site operated by Marcel Intelligence LLC
• Client engagements — data analytics projects and custom AI development work performed for our business clients

These two contexts operate under different data practices, each described separately below. If you are a business client or prospective client, the terms of any applicable master services agreement or data processing addendum between Marcel Intelligence LLC and your organization will govern in the event of any conflict with this policy.

2. Website Visitors

Our website is informational in nature. The only personal information we collect from website visitors is information you choose to provide voluntarily through our Contact Us form.

Information you may provide:

• Your name
• Your email address
• Any message or inquiry you choose to submit

Submission of this form is entirely optional. We use the information you provide solely to respond to your inquiry and to communicate with you about our services. We do not use it for marketing purposes without your consent, and we do not sell or share it with third parties except as described in Section 5.

Tracking and analytics: We do not currently use third-party analytics platforms, advertising pixels, or tracking technologies on our website. We do not build visitor profiles or retarget website visitors.

Standard server logs generated when you visit our site (such as IP address and browser type) may be temporarily retained by our hosting provider for security and operational purposes. This data is not used to identify individuals and is not shared with third parties.

3. Client Engagement Data

Marcel Intelligence LLC provides data analytics services and builds custom AI tools for business clients. The nature of personal data processed in these engagements varies by project.

Acting as a data processor: In some engagements, clients provide us with datasets that may contain personal information about their own customers, employees, or other end-users. In these cases, Marcel Intelligence LLC acts as a data processor on behalf of the client, who is the data controller. We process such data only:

• As documented in the applicable services agreement or data processing addendum
• For the specific purpose of delivering the agreed services
• In accordance with the client's documented instructions

Engagement-specific terms: Clients whose engagements involve the transfer of personal data will be asked to execute a Data Processing Addendum (DPA) that specifies the categories of data, processing activities, sub-processor arrangements, and applicable legal safeguards.

If you are an individual whose data may have been shared with Marcel Intelligence LLC as part of a client engagement and you have questions about how it is being used, please contact the organization that collected your data in the first instance, as they are the data controller responsible for that collection.

4. How We Use Data

Data processed in connection with client engagements is used solely to:

• Deliver the contracted analytics or AI development services
• Communicate with client contacts regarding project status, deliverables, and support
• Meet legal, regulatory, or contractual obligations
• Improve our methodologies and service quality, using only aggregated and non-identifiable insights

We do not use client data to train general-purpose AI models, sell data to third parties, or build any profiles unrelated to the contracted engagement.

5. Data Sharing

We do not sell personal data. We may share data in the following limited circumstances:

• Sub-processors and vendors — we may engage trusted third-party service providers (e.g., cloud infrastructure, project management tools) who process data on our behalf under confidentiality obligations and, where applicable, data processing agreements
• Legal compliance — we may disclose data when required by law, court order, or government authority, or to protect the rights, safety, or property of Marcel Intelligence LLC or others
• Business transfers — in the event of a merger, acquisition, or sale of substantially all assets, data may be transferred as part of that transaction, subject to equivalent privacy protections

Any sub-processors used in connection with a client engagement will be disclosed to the relevant client upon request or as required by the applicable DPA.

6. Data Retention

We retain data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law or contract.

• Client project data — retained for the duration of the engagement and for a post-engagement period as specified in the applicable services agreement (typically 90 days after project close, unless otherwise agreed)
• Business contact information — retained for the duration of the client relationship and for a reasonable period afterward for legal and accounting purposes
• Financial records — retained for a minimum of 7 years in accordance with Illinois and federal tax requirements
• Website server logs — retained by our hosting provider per their standard operational policies, typically no longer than 90 days

Upon expiration of the applicable retention period, data is securely deleted or irreversibly anonymized.

7. Security

Marcel Intelligence LLC implements appropriate technical and organizational measures to protect data against unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption of data in transit (TLS/HTTPS) and at rest where applicable
• Access controls limiting data access to personnel who require it for their role
• Confidentiality obligations for all staff and contractors
• Regular review of security practices as our services and technology evolve

No method of electronic transmission or storage is completely secure. In the event of a data breach affecting personal data, we will notify affected clients and, where required by law, relevant authorities, in a timely manner.

8. Your Rights

Depending on your location and applicable law, you may have rights regarding your personal data, including rights of access, correction, deletion, portability, and objection to processing.

Illinois residents: Illinois law, including the Illinois Personal Information Protection Act (PIPA), provides certain rights regarding personal data. We comply with all applicable Illinois privacy requirements.

If you are a client end-user: Because Marcel Intelligence LLC acts as a data processor in client engagements, requests from individuals whose data was shared with us by a client should be directed first to that client organization (the data controller). We will cooperate with clients in responding to verified individual rights requests as required by applicable law and the terms of our DPA.

To submit a privacy rights request directly to Marcel Intelligence LLC, contact us at the address below. We will respond within 30 days.

9. Children's Privacy

Our website and services are directed exclusively to business clients and professionals. We do not knowingly collect or process personal information from individuals under the age of 13. If we become aware that we have inadvertently received such information, we will delete it promptly. Please contact us if you have concerns about data relating to a minor.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will take reasonable steps to notify affected clients directly.

We encourage you to review this policy periodically. Your continued use of our website or services after any changes take effect constitutes your acceptance of the updated policy.

Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to inquire about a Data Processing Addendum for your engagement, please contact megan@marcelintel.com .