Privacy Policy

1. Introduction

Markdup ("we", "us", or "our") operates markdup.app. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Service.

2. Information We Collect

Information you provide:

• Email address and name when you create an account
• Files you upload (images, PDFs, video files)
• Comments and annotations you or your clients leave on review links
• Payment information processed by Stripe (we never store card details directly)

Information collected automatically:

• IP address and browser type when you access the Service
• Usage data such as pages visited and features used (via Posthog)
• Cookies necessary for authentication and session management

Information from third parties:

• If you sign in with Google, we receive your name and email address from Google

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service
• Send email notifications about feedback on your review links
• Send transactional emails including trial reminders and billing receipts
• Detect and prevent fraud, abuse, and prohibited content
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for advertising purposes.

4. File Storage and Infrastructure

Files you upload are stored on Supabase infrastructure hosted on Amazon Web Services (AWS). All files are encrypted at rest using AES-256 encryption and transmitted over TLS.

Public review links use cryptographically random UUID v4 identifiers. File access is controlled via signed URLs that expire after one hour.

5. Content Scanning

Uploaded images are automatically scanned using Google Cloud Vision SafeSearch to detect prohibited content including explicit material and child sexual abuse material. This scanning occurs before files are made accessible via review links.

6. Data Retention

We retain your account data and uploaded files for the duration of your subscription. Upon cancellation, your data is retained for 30 days and then permanently deleted. You may request deletion of your data at any time by emailing privacy@markdup.app.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. You can control cookies through your browser settings, but disabling essential cookies will prevent you from logging in.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your personal information
• Export your data in a portable format
• Object to certain processing of your information

To exercise these rights, contact us at privacy@markdup.app. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us immediately at privacy@markdup.app.

We have zero tolerance for child sexual abuse material. Any such content discovered on the Service will be reported to the National Center for Missing and Exploited Children (NCMEC) immediately as required by federal law (18 U.S.C. § 2258A).

10. Security

We implement appropriate technical and organisational measures to protect your information including:

• Encryption at rest and in transit
• Row Level Security at the database level
• Rate limiting and input validation
• Regular dependency security audits

No system is completely secure. If you discover a security vulnerability, please report it responsibly to security@markdup.app.

11. International Transfers

Your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for any international data transfers.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of your information. We do not sell personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact

Privacy questions or requests? Contact us at privacy@markdup.app or write to:

Markdup

markdup.app