Privacy Policy
Last updated: 2026-10-26
This describes how Markproof handles personal data in Markproof.
What we collect
Account details you give us (name, email, billing details handled by our payment provider), API usage metadata (timestamps, endpoint, volume — not the content of your requests beyond what's needed to serve them), and anything you upload to process.
Where it's hosted
Our primary database is hosted in the EU.
Retention — what we keep, what we delete
Source files you upload to be marked or verified are processed and not retained afterward. The marked output file is returned to you directly; if you request a download link instead (response_format=url), we store that file for up to 30 days, then delete it automatically. The asset record itself — the watermark code and metadata, not the file — is kept indefinitely so verification keeps working for files you've already marked.
Where we don't need the original content, we store a cryptographic hash and/or a record of the result instead of the raw file, so we can verify or support you without holding data we don't need.
Who else sees it
We share data with the following processors, only as needed to run Markproof:
- Supabase (database, authentication, file storage)
- Upstash (rate limiting)
- Paddle (billing, for paid plans)
We don't sell your data.
Security
Data is encrypted in transit and at rest. Access to production data is logged and limited to what's needed to operate Markproof.
Your rights
You can request a copy of, correction to, or deletion of your personal data by emailing support@markproof.co. We'll respond within a reasonable time and in line with applicable law.
Changes
We'll update this page if how we handle data changes, and update the "last updated" date above.
Contact
support@markproof.co