Privacy

Last updated 29 September 2026.

What Marcel stores

• From Google sign-in: your name, your email address, and the address of your profile picture.
• From your AI, the profile you approve: what you do, what you are working on, what you can help with and what you need, where you are based, your work history and links, your pronouns and interests if you give them, the settings you choose, and that you have confirmed you are 18 or over.
• Your waitlist number and referral link; how many people joined through your link, and whose link brought you here if one did. Referral records hold the id of the person who referred and the person referred, and the time, not their profiles.
• The AI clients you connected (the name and return address each one registered) and the tokens that connect them, with when each client last got one.
• Your sign-in sessions in this browser, the time you signed up and last signed in, and whether your account is on the waitlist or live.
• How many requests and tool calls your AI made each day (counts only, never what was said).
• Marcel never asks for or stores your date of birth or gender.

Cookies

Marcel sets cookies only to work: one that keeps you signed in (30 days), one that binds a Google sign-in to the browser that started it (15 minutes), and one that remembers a referral link you opened until you sign in (30 days). There are no advertising or analytics cookies.

What Marcel does not store

Your conversations with your AI, LinkedIn PDFs or exports, and any session transcripts. Your AI reads those and sends Marcel only the fields you approve. Marcel does not run its own AI over your data.

Who sees it

No other member can see your profile: search is not live. The one thing another person can see is your username, in the data export of someone you referred. When search launches, members will see profiles that are set to discoverable, which is the default, and not profiles set to private. Your job-search status stays hidden from people at your current company unless you turn that on. The people who run Marcel can see what is stored, your email included, to run the waitlist and to decide who goes live. Marcel does not sell your data and does not share it with anyone except the services below that run it.

Who processes it

Google handles sign-in; Marcel never sees your password. Neon hosts the database, in the United States. Neon Auth, which does the Google sign-in for Marcel, keeps its own account and sign-in session records in that database. Cloudflare runs the Marcel server and its rate limiting, sees the IP address of every request, and keeps server logs for up to 7 days. Your own AI provider (Anthropic, OpenAI, xAI, Cursor, or whichever client you connected Marcel in) sees everything Marcel sends back to your AI, under that provider's own terms.

How long it is kept

Your account, profile and waitlist number: until you delete them. Sign-in sessions in this browser: 30 days, and the nightly cleanup deletes the record about a day after that. An AI connection: the access token lasts 60 minutes and your AI renews it with a refresh token that lasts 30 days from its last use, so a connection you keep using stays connected until it is disconnected or you delete your account. Token records are deleted 7 days after they expire or are revoked. An AI client registration: deleted 7 days after it was made if it never connected, and after 365 days without use. Daily request counts: 90 days. The IP address a client registered from: 48 hours, for rate limiting only, and cleared by the next nightly run after that. Rate limit counters hold a count and no address, last for the length of the limit (a minute to a day), and are then deleted. Short-lived sign-in records: about 1 day after they expire. Error records that never contain your profile: 7 days.

Your rights

Ask your AI to show what Marcel holds about you, and it will return the records Marcel holds about you in one document, including connected clients, sessions and daily counts. It leaves out technical details such as the address a client registered from, and Neon Auth's own tables, which are removed when you delete your account. Ask it to change anything in your profile, and it will. Your name, email and picture come from Google and are refreshed each time you sign in, and your waitlist number never changes. Ask it to delete your Marcel account, and everything is removed at once, including your sign-in identity, with no undo. When an AI client disconnects, it asks Marcel to revoke the token it holds. Deleting your account ends every connection at once. You can also write to the contact below for any of these, or to complain.

Email

Marcel stores the email address Google gives it. Marcel does not send email today. If it writes to you, it will be about your Marcel account.

Age

Marcel is for people 18 or over. We ask you to confirm that once and store the yes, never your date of birth.

Contact

privacy@marcelme.dev

See also the Terms.