Privacy Policy

1. Introduction

MARKETRONIX LTD (company number 17331464, registered in England and Wales, registered office Dept 6916, 196 High Road, Wood Green, London, N22 8HH, United Kingdom), which operates Cobalt at cobalt.boutique ("we," "our," or "us"), is the data controller and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use Cobalt, our cloud Mac platform for iOS and macOS developers.

2. Information We Collect

Account Information

• Email address (required for account creation)
• Name (optional, for personalization)
• Payment information (processed securely via our payment provider)

Usage Information

• Session duration and credit usage statistics
• Technical logs for service improvement and debugging
• IP address and device information for security purposes

If you apply as an App Expert

• A government-issued photo ID, and optionally a selfie holding it and your CV — stored privately, seen only by our staff for verification, and never shown to clients
• Your focus area, experience, weekly capacity and portfolio links
• Bank details for payouts (IBAN, BIC, account holder and bank country), seen only by you and our staff and used only to pay your withdrawals

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our cloud computing services
• Process payments and manage your account balance
• Answer the messages you send us through the Support page
• Ensure security, prevent fraud, and detect abuse

4. Data Storage and Security

Traffic to Cobalt is encrypted with TLS, and our database is encrypted at rest by its provider. The files you put on a Cobalt Mac stay on it for the session and are wiped when the session ends and the Mac is handed back.

Where your data is stored

• The Cobalt application runs on Vercel in Washington, D.C., United States.
• Our database, including your account, orders, credit usage and any App Expert application with its ID documents, is hosted by Neon in the AWS US West (Oregon) region, United States.
• If you accept analytics cookies, usage events go to PostHog's US region.

How long we keep it

• Your account and everything tied to it (orders, credit usage, projects, Macs, scripts, notifications, and App Expert profile, earnings and bank details) are kept while your account is open. Deleting your account in Settings removes all of it at once.
• You stay signed in for up to 30 days; after that you sign in again.
• App Expert applications, with their ID documents, and messages sent through the Support page are kept until you ask us to delete them at support@cobalt.boutique.

5. Your Rights

You have the right to:

• Access your personal data and receive a copy
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format (JSON)

6. Cookies

We use essential cookies for authentication and session management. Analytics cookies help us understand usage patterns. See our Cookie Policy for more details.

7. Third-Party Services

We use these third-party processors: a PCI-DSS compliant card-payment processor (card payments and 3-D Secure), PostHog (product analytics, only after you accept analytics cookies), Vercel (application hosting), Neon (database) and RentAMac (the Apple Mac hardware your workstation runs on). We do not store full card numbers. These services have their own privacy policies and handle data according to their terms. We do not sell your personal information to third parties.

8. International Transfers

Your data is stored and processed in the United States, as set out in section 4. If you live outside the United States, using Cobalt means your data is transferred there. Wherever it is processed, we rely on appropriate safeguards so that your data keeps the same protection, in compliance with applicable data-protection law.

9. Changes to This Policy

We may update this policy periodically. Significant changes are published on this page, with the revision date at the top updated, at least 30 days before they take effect. The current version is always the one published here.

10. Age Restrictions and Eligibility

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal data from a person under 18 without parental consent, we will take steps to delete that information promptly.

Our services are available to users worldwide. The data processing practices described in this policy apply wherever you access Cobalt from. If you have concerns about how we handle your data, you can raise them with the competent data-protection authority where you live.

11. Legal Disclaimers

While we implement reasonable security measures to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

This Privacy Policy is governed by the laws of England and Wales and by applicable data-protection law, including the UK GDPR and the EU GDPR where they apply to you. Your statutory rights under that law are described above. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.