Legal
Martian Privacy Policy
Effective date: November 2, 2026 Who we are: Martian Industries LLC, 604 Clark St, Hollidaysburg, PA 16648. Contact: matthew@martianindustries.io.
The short version
- We never sell your data. Not yours, and not your users'. We never rent it, trade it, or share it with anyone for their marketing.
- We never show ads, and never use your data to target ads anywhere.
- We never train AI models on your data, and never let anyone else do it with data we hold.
- We collect what we need to run Martian for you, keep it only as long as we need it, and tell you here exactly who helps us run it.
- You can download everything and delete your account whenever you like.
This is a promise, not a setting. If we ever wanted to change it, we would have to tell you first, and it would only apply to data collected after the change.
Two kinds of data
1. Data about you, the Martian customer. Your name, email address, password (stored only as a one-way hash), two-step sign-in secret (encrypted), your organisation's name, who on your team has access, your plan and billing history, and a record of what was done in your account (the audit log, which you can see).
2. Data you put into Martian. Everything your sites, apps and projects store with us: database tables, files, emails you send, your monitors, your analytics, your audits, your code checkouts for deploys and audits, your secrets. This includes data about your users. For this data, you are in charge and we act on your instructions only: we store it, process it to run the features you use, and do nothing else with it. In privacy-law terms, you are the controller and Martian is your processor.
What we collect and why
| What | Why | How long |
|---|---|---|
| Account details (name, email, organisation) | To sign you in and run your account | While your account exists, then 30 days |
| Billing details | To bill you. Card numbers go straight to Stripe; we never see or store them | As long as tax law requires (usually 7 years for invoices) |
| The audit log of actions in your account | Security, and so you can see who did what | 1 year |
| Sign-in records (time, IP address, device) | To spot break-ins and stop them | 90 days |
| Support emails you send us | To help you | 2 years |
| Your project data (section 2 above) | To run the features you use | Until you delete it or your account, then 30 days; backups roll off within 30 days after that |
Martian Analytics, on your sites
If you put Martian Analytics on your site, it counts visits without cookies and without storing IP addresses. It works out a visitor's rough country from the address and then throws the address away. It cannot follow a person from one site to another. Your visitors' data is yours (section 2 above).
Martian Audit
When you audit a site, Martian visits it with a real browser, takes screenshots and reads the pages, as any visitor would. If you turn on the AI pass, screenshots and page text are sent to Anthropic for analysis (see below). You may only audit sites you own or whose owner has approved it (our Acceptable Use Policy).
Martian Brain
Martian Brain is a company's memory: it keeps what the company chooses to connect, files the tasks, promises, decisions and questions in it, and answers the company's own people. It only hears what the company connects on purpose, and everything it keeps is the company's data (section 2 above), with the company as controller and Martian as its processor.
What it can hear, only once the company connects each one:
- Work email, copied to the brain by a rule the company's email admin adds. Codes, password resets and sign-in alerts are thrown away before they are stored. Bulk mail, receipts and notifications are kept but never read by the AI.
- A personal Gmail, only if its owner forwards it in themselves. What is filed from it is visible to the company's owners only.
- The team's chat group (Telegram), once the company links it. Voice notes are turned into words on Martian's own server; the audio is not sent to anyone else.
- Photos and PDFs someone sends the chat, read by AI so what they say can be filed.
- Website contact forms the company points at it.
- Calls on the company's Martian phone line (Martian Phone, below).
What it does with it: files it into tasks, promises, decisions, questions and notes; answers questions from the company's own people, each with their own access (owners can see owners-only things, a team chat only sees what the whole team may); and writes reply drafts. It never sends an email for anyone unless that person reads the draft and taps Send, and it only sends from an account that person connected. It never deletes, moves or answers mail on its own.
People who write to the company (its customers, suppliers and leads) do not deal with Martian; the company does, and the company is responsible for telling them it keeps records of their messages. The company's own staff must be told in writing before the brain hears their email, chat or calls. We give companies a ready notice for that.
How long: raw messages (emails, chat lines, website enquiries, call transcripts and texts) are deleted after two years, or sooner if the company chooses (30 days at the least); a conversation on someone's page then keeps only its one-line summary. What was filed from them (tasks, decisions, notes) is the company's own record and stays until the company deletes it. Everything the brain holds is deleted with the company's account (section "Your rights").
Sealed with the company's own key: the messages and conversation details are encrypted with a key that belongs to that company alone, itself kept encrypted by Martian's master key. Deleting the company deletes its key, so nothing left in old backups can be read. What stays readable so the brain can work: who a message was from, when, and an index of its words for search.
Forgetting a person: when someone asks a company to delete what it holds about them, the company can remove them and their messages everywhere in the brain at once (their page, their conversations, every email they sent or were sent, enquiries, reply drafts, calls and texts, and tasks about them).
Google accounts connected to the brain
A person can connect their Google account so the brain can send replies they approve and add events to their calendar. Martian asks only for permission to send email (never to read the inbox) and to see and add calendar events: it reads upcoming meetings so it can brief the person before one, and adds the events they ask for. The connection is stored encrypted and can be removed at any time, by the person or in their Google account settings.
Martian's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we use it only to send the emails the person approves, brief them before their meetings and add the events they ask for, we never use it for ads, we never sell it, we never let a person read it except where the person asks, for security, or as the law requires, and we never use it to train AI models.
Martian Phone
If a company uses a Martian phone line, an AI answers its calls and says it is an AI at the start of every call. Calls are carried by Twilio. What callers say is turned into words so the company can see what was asked and what needs a call back. Recording is off unless the company turns it on; when it is on, the call says so before recording starts, and a caller who says no is not recorded. Recordings are deleted after 90 days unless the company chooses otherwise. Pennsylvania and several other states require everyone on a call to agree to recording: the announcement is how we ask.
Who helps us run Martian
We use these companies to provide the service. Each only gets what it needs for its job, and each is bound to protect it:
| Company | What for | What it sees |
|---|---|---|
| DigitalOcean (New York, USA) | The servers Martian and your deployed sites run on | Everything stored on those servers, encrypted at rest |
| Cloudflare (USA) | Storage for files and encrypted backups | Your files; backups are encrypted with our key before they leave our server |
| Amazon Web Services (USA) | Sending email, and receiving the email copied to Martian Brain (Amazon SES) | The emails you send through Martian, and the email copied to the brain |
| Stripe (USA) | Payments and invoices | Your billing details and card |
| Anthropic (USA) | The AI in Martian Brain, Martian Phone, and the optional AI pass in Audit, when Martian's key is used | The messages, photos, documents, call words and screens being filed, answered or reviewed (never the bulk mail the brain skips). Anthropic does not train its models on this data. If you use your own Anthropic key, your agreement with Anthropic applies instead |
| Telegram Messenger Inc. | Carrying the team chat linked to Martian Brain | The messages in that chat. Telegram's own privacy policy applies to the chat itself |
| Google (USA) | Sending the replies and adding the calendar events a person approves, from the Google account they connected | The approved email or event |
| Twilio (USA) | Carrying calls and texts on a Martian phone line | The calls and texts on that line |
| GitHub (USA) | Reading your code when you connect a repo for deploys or audits | Only what our read-only key can see |
| Google Workspace (USA) | Our own email, including support | Emails you send us |
We will update this list before adding anyone new, and tell account owners by email at least 30 days before a new company gets access to project data.
We share data only when
- You tell us to (for example, you invite a teammate, or connect a repo).
- The law makes us (a valid court order or similar). We will tell you first unless the law forbids it, and we will push back on requests that are too broad.
- To protect people from immediate harm, such as fraud or an active attack, and only as much as needed.
If Martian Industries is ever sold or merged, this policy goes with your data: the new owner must keep these promises or delete the data.
Security
Passwords are hashed. Secrets and two-step sign-in seeds are encrypted. Each project's data is kept in its own database schema with its own access rules. Backups are encrypted before they leave the server and a restore is tested regularly. Staff access is limited to what is needed to keep Martian running or to help you when you ask. If there is a breach that affects your data, we will tell you without delay, and within 72 hours of learning of it.
Your rights
Wherever you live, you can:
- See what we hold about you, and download it, from your account (Settings) or by asking us.
- Correct anything wrong.
- Delete your account and its data (Settings). It is gone from the live system at once and from backups within 30 days.
- Object to anything we do with your data, and complain to your local data protection authority.
If you are a user of a site or app built on Martian and want to use these rights, contact the business that runs that site; we will help them do what you ask.
Children
Martian is for people building software, not for children. We do not knowingly collect data from anyone under 16.
Changes
We will email account owners at least 30 days before any change that affects how we use data, and keep earlier versions of this policy available.