Privacy & Data Protection

The Marora.app platform is operated by Marora Collective (“we”, “us”), a B2B LinkedIn content agency, acting as the data controller for personal data processed in the platform. For any privacy question or to exercise your rights, contact us at christian@maroracollective.com.

Marora.app is a private, invite-only tool that lets a company’s nominated stakeholders supply, review and approve LinkedIn content that we produce on their behalf. Access is limited to our operators and the stakeholders each client authorises. There is no public sign-up.

• Stakeholder profile — name, work email address, and optionally department and phone number, provided by the client so we can give access and coordinate content.
• Activity data — sign-in timestamps, content you submit or approve, messages you send in a content thread, and the timing of those actions (used to keep deliverables on schedule).
• Content — the text, images and video you upload for a post, and its processed versions.
• Notes we write about a published post — our own short commentary on how a post went. These are our words, not data taken from LinkedIn.

We do not store LinkedIn passwords or login credentials, we do not post on your behalf automatically, and we do not collect personal data beyond what is needed to deliver the service (data minimisation). Nothing is published without a person’s explicit approval.

We do not store LinkedIn performance data. Reach, impressions, reactions, comments, shares, clicks, follower counts and page views are held by LinkedIn, and we read them there when we report on results. This system keeps no copy of them, and any figures it had previously recorded have been deleted.

We process this data to perform our content-services agreement with the client and for our legitimate interest in running that service reliably (coordinating deadlines, producing and reporting on content). Where required, processing rests on the client’s instructions as part of that engagement.

We rely on a small set of established providers to run the platform:

• Railway — application hosting and database.
• Cloudflare R2 — storage of uploaded content files.
• Resend — transactional email (reminders, notifications).
• Anthropic — AI assistance in drafting reminder and content text.

Each processes data only on our instructions. Some may process data outside the EU/EEA under appropriate safeguards (e.g. Standard Contractual Clauses).

We retain personal data for the duration of the client engagement and for a reasonable period afterwards as needed for reporting and legal obligations. On request, or when an engagement ends, we delete or anonymise stakeholder personal data that we are no longer required to keep.

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise any of these, email christian@maroracollective.com. You also have the right to lodge a complaint with your national data-protection authority.

Access is restricted to authenticated operators and authorised stakeholders. Traffic is encrypted in transit, secrets are stored hashed or encrypted, and each client’s data is isolated from every other client’s.

We may update this notice as the platform evolves. Material changes will be reflected here with a new “last updated” date.