How MarginArc collects, uses, and protects your information.
Effective Date: March 13, 2026
Operator: MarginArc (operated by Matt Rothberg)
Contact: [email protected]
This Privacy Policy (“Policy”) describes how MarginArc (“MarginArc,” “we,” “us,” or “our”), operated by Matt Rothberg, collects, uses, stores, processes, and discloses information when you access or use the MarginArc Consumer web application located at consumer.marginarc.com (the “Service”). By creating an account, accessing, or using the Service in any manner, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree, you must not use the Service.
MarginArc provides a margin intelligence platform for IT Value-Added Reseller (“VAR”) sales professionals. The Service evaluates deal data submitted by users and returns margin scoring recommendations, pricing benchmarks, and related analytics. A core function of the Service is the aggregation and anonymization of submitted deal data to generate market intelligence, pricing benchmarks, and industry analytics that benefit all users and inform the development of MarginArc’s products and services.
We collect information you provide directly, information generated through your use of the Service, and information from third-party services integrated into the platform.
When you register for the Service, we collect your full name, email address, and password. Your password is cryptographically hashed by our authentication provider (Supabase Auth) and is never stored in plaintext. We also collect your company name and professional role during onboarding.
To tailor the Service to your needs, we collect additional profile data including, but not limited to: your primary Original Equipment Manufacturer (“OEM”) relationships, average deal size range, years of experience in the IT channel, company size category, and VAR type classification. You may update this information at any time through the Settings page.
The core functionality of the Service requires you to submit detailed deal information. This includes, without limitation: deal names, customer names, customer segment classifications, OEM and product category identifiers, list prices, cost prices, margin percentages, deal registration status, services attachment information, competitive pressure indicators, competitor names, anticipated close dates, deal value, and any notes or commentary you provide. All deal data you submit is stored in our database and associated with your account.
The Service allows you to upload vendor quote documents in PDF format. Uploaded files are stored in Supabase Storage and processed using artificial intelligence (the Anthropic Claude API) to extract deal-relevant data. We retain both the original uploaded file and any data extracted from it. You should not upload documents containing information you do not wish MarginArc to process and retain.
When you score a deal, we store all scoring outputs including margin recommendations (conservative, recommended, and aggressive bands), confidence levels, win probability estimates, score driver breakdowns, and the complete input parameters used to generate each score. This data is permanently associated with your account and contributes to our aggregate analytics.
If you submit feedback through the in-app feedback widget, contact us via email, or otherwise communicate with us, we collect and retain the content of those communications, including any personal information contained therein.
We automatically collect usage data through Vercel Analytics, including but not limited to: pages viewed, features used, session duration, referral sources, browser type, device type, operating system, screen resolution, and general geographic location derived from IP address. This data is collected in aggregate and is used to improve the Service.
We use Sentry for error monitoring and performance tracking. When errors occur, Sentry may capture stack traces, browser information, device information, and contextual data about the state of the application at the time of the error. This data is used solely for debugging and improving the reliability of the Service.
We use the information we collect for the following purposes:
This section describes a core aspect of how MarginArc operates. Please read it carefully.
When you submit deal data to the Service, that data—along with deal data submitted by other users—is aggregated and anonymized to create market intelligence products, pricing benchmarks, competitive analyses, and industry trend data (collectively, “Aggregated Data”). This Aggregated Data is a key output of the Service and is central to MarginArc’s business model.
Anonymization Process: When we create Aggregated Data, we remove or transform personally identifiable information so that the resulting data cannot reasonably be used to identify any individual user, specific deal, or specific company. Aggregated Data reflects market trends, category-level pricing patterns, and statistical benchmarks—not individual transactions.
Ownership of Aggregated Data: You acknowledge and agree that all Aggregated Data derived from your submissions, in combination with submissions from other users, is the sole and exclusive property of MarginArc. MarginArc may use, license, sublicense, sell, publish, distribute, and otherwise commercially exploit Aggregated Data without restriction, compensation to you, or further notice.
Underlying Data: While published outputs are always anonymized, MarginArc retains the right to use, process, analyze, and derive insights from the underlying non-anonymized deal data you submit for the internal purposes described in Section 2, including algorithm training, product development, and service improvement. This underlying data is not shared externally in individually identifiable form except as described in Section 4.
No Opt-Out for Aggregation: Because data aggregation and anonymization are integral to the functioning of the Service and the value proposition offered to all users, there is no mechanism to opt out of data aggregation while continuing to use the Service. If you do not wish your deal data to be aggregated, you must discontinue use of the Service.
MarginArc may share, sell, license, or otherwise distribute Aggregated Data (as defined in Section 3) to third parties for commercial or non-commercial purposes. This data does not identify individual users or specific deals.
We share your information with third-party service providers who perform services on our behalf, subject to contractual obligations of confidentiality and data protection. These providers include:
Each service provider processes data only as necessary to provide their respective services and is bound by their own privacy policies and data processing agreements.
We may disclose your information if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Service or other agreements; (c) detect, prevent, or address fraud, security issues, or technical problems; or (d) protect the rights, property, or safety of MarginArc, our users, or the public as required or permitted by law.
In the event MarginArc is involved in a merger, acquisition, asset sale, financing, reorganization, bankruptcy, receivership, dissolution, or similar transaction, your information (including all deal data, account data, and Aggregated Data) may be transferred, sold, or assigned as part of such transaction. You acknowledge and agree that such transfers may occur and that any acquirer or successor may continue to use your information as set forth in this Policy.
We may share your information for other purposes with your explicit consent.
MarginArc retains your information for as long as your account is active and thereafter as described below.
Your account information, profile data, deal submissions, uploaded documents, scoring results, and associated metadata are retained indefinitely unless you request deletion as described in Section 5.3. Indefinite retention enables us to maintain the integrity of our scoring models, provide you with historical analytics, and contribute to the ongoing improvement of the Service.
Aggregated Data and any anonymized derivatives of your submissions are retained permanently and irrevocably. Because Aggregated Data is anonymized and combined with data from other users, it cannot be attributed to, or disaggregated for, any individual user. Aggregated Data survives any deletion of your account and is not subject to deletion requests.
You may request deletion of your account and personally identifiable information by contacting us at [email protected]. Upon receipt of a verified deletion request, we will delete or de-identify your personal information within 45 days, subject to the following exceptions:
MarginArc uses artificial intelligence and machine learning technologies in two primary capacities:
We implement commercially reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security, and you acknowledge and accept this inherent risk when using the Service.
The Service uses the following cookies and similar technologies:
We do not use third-party advertising cookies or tracking pixels. We do not sell data to advertisers or participate in ad networks.
The Service integrates with the following third-party services, each of which has its own privacy policy governing its processing of your data:
We encourage you to review the privacy policies of these third-party services. MarginArc is not responsible for the privacy practices of third-party service providers.
The Service is operated from and data is stored in the United States. Our primary infrastructure is located in the following U.S. regions:
If you access the Service from outside the United States, you acknowledge and consent to the transfer, processing, and storage of your information in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you expressly consent to such transfers.
You may review and update your account and profile information at any time through the Settings page within the Service.
You may export your deal data in CSV format through the Settings page. This provides a portable copy of your individual deal submissions.
You may opt out of non-essential marketing communications by updating your notification preferences in Settings or by clicking the unsubscribe link in any marketing email. You cannot opt out of transactional emails necessary for the operation of the Service (e.g., password resets, security alerts).
You may request deletion of your account as described in Section 5.3. Please note the limitations on deletion described therein, particularly with respect to Aggregated Data.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with certain rights regarding your personal information. These include:
Sale of Personal Information: MarginArc does not sell personal information as defined under the CCPA. The creation and commercial distribution of Aggregated Data (which is anonymized and does not constitute “personal information” under the CCPA) is not a “sale” of personal information.
To exercise your California privacy rights, contact us at [email protected]. We will verify your identity before processing your request. You may be asked to provide information that matches our records to confirm your identity.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable local data protection laws provide you with additional rights. Our legal bases for processing your personal data include:
Your rights under GDPR include the right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise these rights, contact [email protected]. Please note that certain rights may be limited where we have a compelling legitimate interest or legal obligation to continue processing, and that the right to erasure does not extend to Aggregated Data as described in Section 5.2.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe a child under 18 has provided personal information to us, please contact us at [email protected].
We reserve the right to modify this Policy at any time at our sole discretion. When we make changes, we will update the “Effective Date” at the top of this page and post the revised Policy on the Service. We may, but are not obligated to, notify you of material changes via email or through an in-app notification.
Your continued use of the Service after any changes to this Policy constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must stop using the Service and may request account deletion as described in Section 5.3. It is your responsibility to review this Policy periodically for any updates.
This Policy shall be governed by and construed in accordance with the laws of the State of New York, without regard to its conflict of law principles. Any disputes arising from or relating to this Policy or your use of the Service shall be resolved exclusively in the state or federal courts located in New York County, New York, and you consent to the personal jurisdiction of such courts.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
This Privacy Policy was last updated on March 13, 2026. By using the MarginArc Consumer application, you signify your acceptance of this Policy. If you do not agree with this Policy, please do not use the Service.