Privacy Policy
Last updated: November 2024
1. Information We Collect
Information You Provide
- Account information (name, email address, password)
- Profile information and preferences
- Documents and content you create or upload
- Communication with our support team
- Payment information (processed securely through third-party payment processors)
Information Collected Automatically
- Device information (browser type, operating system, IP address)
- Usage data (features used, time spent, interactions)
- Cookies and similar tracking technologies
- Log data and error reports
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process and store your documents securely
- Send you updates, security alerts, and support messages
- Respond to your comments and questions
- Analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations and enforce our terms
3. Data Storage and Security
We take data security seriously and implement multiple layers of protection:
- End-to-end encryption for all documents
- Secure data centers with 24/7 monitoring
- Regular security audits and penetration testing
- Two-factor authentication options
- Automated backups and disaster recovery systems
- Industry-standard SSL/TLS encryption for data in transit
4. Third-Party Services
We use trusted third-party services:
- Authentication: Google OAuth, GitHub OAuth for secure login
- Analytics: Google Analytics for usage statistics (anonymized)
- Payment Processing: Stripe for secure payment handling
- Cloud Infrastructure: AWS for hosting and storage
These services have their own privacy policies and are committed to protecting your data.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following circumstances:
- With your consent: When you explicitly authorize us to share information
- Service providers: With trusted partners who help us operate our service
- Legal requirements: When required by law or to protect our rights
- Business transfers: In connection with a merger, acquisition, or sale of assets
6. Your Rights and Choices
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Object: Object to processing of your data for certain purposes
To exercise these rights, contact us at privacy@mdconvert.com
7. Data Retention
We retain your information for as long as your account is active or as needed to provide services. When you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain certain information.
8. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it immediately.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or sending you an email. Your continued use of our services after such changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@mdconvert.com
- Address: 123 Markdown Street, San Francisco, CA 94102
GDPR & CCPA Compliance
We comply with the General Data Protection Regulation (GDPR) for European users and the California Consumer Privacy Act (CCPA) for California residents. You have additional rights under these regulations, including the right to data portability and the right to restrict processing.