Privacy Policy

1. Our Commitment

mrkdwn.me ("we", "us", "our") respects your privacy. We will not sell, rent, lease, or trade your personal data or vault content to any third party. Your notes are yours.

2. Data We Collect

When you use the Service, we collect and store:

• Account information provided through Clerk (email address, display name, authentication tokens)
• Vault content you create (notes, folders, and their metadata)
• Usage data such as audit logs and version history within your vaults
• API keys you generate for programmatic access
• Settings and preferences you configure (e.g., OpenRouter API key for AI edit mode)

We do not use tracking cookies, analytics services, or advertising pixels. We do not build profiles of your behavior for marketing purposes.

3. How We Use Your Data

Your data is used solely to provide and operate the Service. This includes:

• Storing and syncing your notes and folders in real time
• Authenticating your identity and managing access permissions
• Enabling features like search, backlinks, graph view, and version history
• Processing AI chat requests when you choose to use those features

4. Third-Party AI Services

mrkdwn.me offers optional AI-powered features, including Q&A chat and AI edit mode. When you use these features, your vault content (or portions of it relevant to your query) is sent to third-party AI providers for processing. These providers currently include:

• Anthropic (Claude) — used for Q&A chat mode
• OpenRouter — used for AI edit mode (using your own API key)

When you use AI features, the relevant note content from your vault is transmitted to these providers to generate responses. These third-party AI services are outside of our control. We cannot guarantee how they store, process, retain, or use the data they receive. Each provider is governed by their own privacy policy and terms of service.

By using any AI feature on mrkdwn.me, you acknowledge and accept that:

• Your vault content will be sent to third-party AI providers
• Those providers may store, log, or use your data according to their own policies
• We have no control over what those providers do with your data once it leaves our servers
• You use AI features at your own risk and discretion

If you do not want your data sent to third-party AI services, simply do not use the AI chat features. All other features of mrkdwn.me function without any data leaving our infrastructure.

5. Data Storage and Security

Your data is stored on Convex, our serverless backend provider. Authentication is handled by Clerk. We use industry-standard practices to protect your data, including encrypted connections (HTTPS), hashed API keys (SHA-256), and per-user data isolation enforced at the backend level.

However, no system is perfectly secure. We cannot guarantee absolute security and are not liable for any unauthorized access or data breaches. See our Terms of Service for details on limitation of liability.

6. Data Sharing

We do not sell your data. We do not share your data with third parties except:

• AI providers — only when you actively use AI features (see Section 4)
• Infrastructure providers — Convex (database) and Clerk (authentication) process your data as necessary to operate the Service
• Legal obligations — if required by law, court order, or government request
• Vault collaborators — if you share a vault with other users, they can access that vault's content according to their assigned role

7. Data Retention

Your data is retained for as long as your account is active. Deleted notes and folders are moved to trash and retained for up to 5 years before permanent deletion. If you delete your account, we will remove your data within a reasonable timeframe, though backups may persist for a limited period.

8. Your Rights

You can export all of your vault data at any time using the download feature (ZIP export). You own your content and can take it with you at any point.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy, you can reach us at support@mrkdwn.me.