Privacy Policy

Last updated: 28.02.2026

This Privacy Policy explains how Demarka (“we”, “us”, “our”) collects, uses, stores, and protects personal data when users (“you”) access our platform or interact with our services. We comply with the General Data Protection Regulation (GDPR) and other applicable European data protection laws.

1. Data Controller

CLEVEROBEDIENCE UNIPESSOAL LDA (operating as Demarka)
NIPC: 518746836
Address: Rua Vitor Bastos, 74, 1dt, Lisbon, 1070-286, Portugal
Email: general@demarka.io

2. What Personal Data We Collect

2.1 Data you provide

Account registration:

Required:

First name, last name
Email address
Country

Optional:

Phone number
Company name
Preferred language

Trademark searches and assessments:

Trademark name, logo images, goods/services descriptions
Target countries and Nice Classification classes
Existing trademarks for comparison

Trademark registration applications:

Mark details: type (text, image, sound, video), text or description, uploaded files (images, audio, video, PDF documents)
Applicant information: full legal name, applicant type (individual or company), company name (if applicable), email address, phone number (optional), mailing address, country
Goods and services: business description, Nice Classification classes
Target countries for registration
Additional notes and communication consent preferences (email, phone/SMS)

Other data you may provide:

Payment information (processed by PCI-compliant providers)
Support requests and communication data
Feedback form submissions (name, email, phone, subject, message)

2.2 Automatically collected data

IP address, browser, OS, device
Cookies and analytics
Log data (timestamps, actions)
Guest session identifiers (for unauthenticated users submitting applications)

3. Purpose and Legal Basis

We process data under GDPR Art. 6 for:

Delivering trademark search and analysis services
Processing trademark registration applications
Generating similarity reports and legal-risk assessments
Processing payments
Service notifications and technical messages
Improving algorithms and platform performance
Marketing communications (only with consent)
Legal compliance

4. How We Use Your Data

Providing free and paid TM search results
Legal compliance analysis and recommendations
Processing trademark registration applications and transferring them to partner attorneys for filing
Monitoring trademarks (if enabled)
Marketplace operations and partner transfer (only with your consent)
Platform analytics and performance optimization
Security and fraud prevention

We do not sell personal data.
We may share it with:

Hosting, analytics, and payment vendors
Qualified partner attorneys who handle trademark filing and registration on your behalf (when you submit a trademark application, your data is transferred to an assigned partner attorney who files with the relevant intellectual property offices)
Other legal partners only if you request or approve
Regulatory bodies when required by law

All processors follow GDPR-compliant agreements.

6. International Transfers

If data is processed outside the EU, we use Standard Contractual Clauses (SCCs).

7. Data Retention

Account data: until you delete your account (via account settings or by emailing general@demarka.io)
Trademark search data: up to 24 months
Trademark application data: retained for the duration required by applicable intellectual property laws and regulations, or until you request deletion (whichever is longer)
Payment data: per legal requirements
Logs: up to 12 months

You may request:

Access
Rectification
Erasure
Restriction
Data portability
Withdrawal of consent
Objection
Complaint to a Data Protection Authority

Requests: general@demarka.io

9. Cookies and Analytics

We use cookies and similar technologies to operate our platform and improve your experience. We use Google Consent Mode v2: the analytics script loads on every page, but no analytics cookies are set and no personal identifiers are collected until you provide consent via our cookie banner. Before consent, Google may collect anonymized, cookieless signals used solely for statistical modeling (approximate traffic counts and geographic trends) — no individual user can be identified from this data.

9.1 Essential Cookies

These cookies are necessary for the platform to function and cannot be disabled:

Cookie	Purpose	Domain	Retention
Session cookies	Authentication and security	app.demarka.io	Session
`dmk_consent`	Remember your cookie consent choice; shared across demarka.io and app.demarka.io	.demarka.io	1 year

When you accept analytics cookies, we use the following services:

Google Analytics 4 (demarka.io and app.demarka.io)

Purpose: Understand how visitors use our site (page views, navigation patterns, device types)
Data collected: Anonymized page views, approximate location (country/city), device and browser information
Data retention: 14 months
Consent Mode: We use Google Consent Mode v2. Before you consent, the GA4 script loads but operates in cookieless mode — no _ga or _gid cookies are set, no user identifiers are stored, and Google uses the data only for aggregate statistical modeling. After consent, standard GA4 cookies are set for full analytics.
More information: Google Privacy Policy

PostHog (app.demarka.io only)

Purpose: Product analytics and session recordings to improve user experience on the application
Data collected: Page views, feature usage, session recordings (with all text inputs masked for privacy)
Data retention: As configured in our PostHog settings
Note: PostHog is only loaded after you grant consent. It is not used on the main landing page (demarka.io).
More information: PostHog Privacy Policy

9.3 How to Manage Your Preferences

Cookie Banner: When you first visit our site, you can accept or decline analytics cookies
Cookie Settings: Click “Cookie settings” in the footer at any time to change your preferences
Browser Settings: You can also block cookies through your browser settings

9.4 What Happens When You Decline

If you decline analytics cookies:

No analytics cookies are set on your device
No personal identifiers or user-level data are collected
Google Analytics operates in cookieless mode and may send anonymized pings used solely for aggregate statistical modeling (e.g., approximate page view counts and country-level trends). No individual user can be identified from this data.
PostHog is not loaded at all
All platform features remain fully functional

10. Security

We apply encryption, access controls, monitoring, and secure cloud infrastructure.

11. Children’s Privacy

Not intended for users under 16.

12. Changes

We will notify you in case of significant updates.