Privacy Policy

Effective date: 27 August 2026

MarkDify is an automated service that converts documents and images into Markdown. This Privacy Policy explains, in general terms, how information is handled when you use it. We keep this description intentionally high-level and do not disclose the internal systems, providers, or technical arrangements used to run the service.

1. Scope

This Policy applies to the MarkDify service made available at markdify.com, including document conversion, image text recognition, file preview and download, and any related features and interfaces. It does not govern third-party websites you may reach through links, or any independent copy of MarkDify operated by someone other than us, which remains the responsibility of whoever operates it.

2. Information We Handle

Files you submit

When you use MarkDify you may submit files. In order to perform the conversion you request, we handle the contents of those files (which may include text, images, tables, and embedded metadata such as filenames, file type, and size) together with the results generated from them.

Files you submit may contain personal information about you or other people. You are solely responsible for having the legal right and any consent needed to submit and process that information.

Technical information

When you use the service, limited technical information may be handled automatically, such as your approximate request information, browser and device characteristics, timestamps, diagnostic information, and security-related events. This is used to operate, secure, and troubleshoot the service.

Account and contact information

If accounts or support channels are offered and you choose to use them, we may handle the information you provide, such as an email address, preferences, and the contents of messages you send us.

Administrative records

We may keep internal records of privileged administrative and security actions taken within the service. We do not intentionally record passwords, secrets, or access credentials in such records.

3. Why We Handle Information

We handle information only for legitimate operational purposes, which may include:

• performing the conversion or processing you request and returning the result;
• operating, maintaining, securing, and improving the reliability of the service;
• preventing fraud, abuse, and misuse, and enforcing usage limits;
• diagnosing and fixing problems;
• providing support and responding to requests; and
• complying with applicable law and establishing, exercising, or defending legal claims.

We do not sell the contents of files you submit, we do not use them for unrelated advertising, and, as of the effective date above, we do not intentionally use the contents of submitted files to train artificial-intelligence models. If this ever changes, this Policy will be updated before the new practice takes effect where the law requires.

4. Legal Bases

Where data-protection law requires a legal basis, we may rely on: performance of the service you request; our legitimate interests in operating, securing, and improving the service (where not overridden by your rights); your consent where we specifically ask for it; compliance with a legal obligation; and the establishment or defence of legal claims.

5. Service Providers

We use reputable third-party service providers to help operate the service (for example, general hosting, storage, delivery, and security functions). These providers act on our behalf and are permitted to handle information only as needed to provide their services and as required by law. We do not identify individual providers, internal systems, or processing arrangements in this Policy.

6. Disclosures

We may disclose information where reasonably necessary to comply with law or valid legal process, to investigate or prevent fraud, abuse, or security incidents, to protect users or the service, to establish or defend legal claims, in connection with a business transfer such as a merger or sale, or where you direct us to do so. We do not sell the contents of files you submit.

7. International Handling

The service and the providers we use may handle information in more than one location, which may be outside your country of residence. Where the law requires safeguards for international handling, we use lawful mechanisms permitted by applicable law.

8. Retention

We do not keep information longer than reasonably necessary for the purpose for which it was handled. Files you submit and their results are handled to provide the conversion and are removed once no longer required for that purpose, subject to any period reasonably needed for security, fraud prevention, legal obligations, or legal claims.

You should never rely on MarkDify as the only copy of a document. Download any output you wish to keep. MarkDify is not a backup service.

9. Security

We use technical and organisational measures intended to protect information, including encryption in transit, access controls, and internal safeguards. However, no online service can guarantee absolute security, and we cannot guarantee that unauthorised access, loss, or interruption will never occur. Where the law requires, we will notify affected people and/or regulators of qualifying incidents.

10. Sensitive Information

MarkDify is a general-purpose conversion service. Unless expressly agreed otherwise in writing, it is not represented as suitable for regulated, classified, evidentiary, or guaranteed-archival use. Do not submit passwords, private keys, authentication secrets, complete payment-card details, classified information, or other highly sensitive information unless you have independently determined that doing so is lawful and appropriate.

11. Information About Other People

A file you submit may contain personal information about someone else. You represent that you have the authority, lawful basis, or consent required to submit it. We cannot independently determine whether every file was lawfully obtained. If you believe information about you has been submitted unlawfully, contact us at privacy@markdify.com.

12. Business Users

If you use MarkDify on behalf of an organisation and submit personal data for which your organisation is responsible, your organisation remains responsible for determining whether the processing is lawful, whether the necessary notices and permissions exist, and whether MarkDify is suitable for that data. If your use requires a data-processing agreement, contact privacy@markdify.com before submitting regulated personal data.

13. Cookies and Browser Storage

MarkDify may use cookies or similar browser storage that are necessary for security, session integrity, preferences, and essential functionality. Where applicable law requires consent before any non-essential technologies are used, we will obtain that consent.

14. Your Rights

Depending on the law that applies to you, you may have rights to access, obtain a copy of, correct, or delete your personal information, to restrict or object to certain handling, to portability, to withdraw consent, to opt out of certain uses, and to complain to a regulator. Rights are subject to applicable exceptions, and we may verify your identity before responding. To make a request, contact privacy@markdify.com.

United Kingdom and Europe

Where UK or EU data-protection law applies, you may exercise the rights it provides and may complain to your data-protection regulator. Nothing in this Policy limits rights that cannot lawfully be limited.

United States (including California)

Where a U.S. state privacy law applies, you may have rights including access, deletion, correction, portability, opt-out of sale or sharing, limits on certain sensitive-information uses, and non-discrimination for exercising your rights. We do not sell personal information for money and do not share it for cross-context behavioural advertising as those terms are defined by applicable law.

United Arab Emirates

Where UAE personal-data law applies, you may have rights concerning information about processing, access, correction, restriction, and deletion in qualifying circumstances, and applicable cross-border requirements will be respected where they apply.

15. Children

MarkDify is not directed to children under 13 (or a higher age where local law requires), and we do not knowingly seek personal information from them. A person below the age of legal majority should use the service only with appropriate parent or guardian involvement where required.

16. Automated Processing

MarkDify performs automated extraction, conversion, text recognition, and structural analysis. These operations may contain errors and are not intended to make legal or similarly significant automated decisions about individuals. Important output should be reviewed independently.

17. Changes to This Policy

We may update this Policy as the service or the law changes. The effective date above will be updated, and where the law requires additional notice or consent for a material change, we will provide it.

18. Contact

MarkDify — markdify.com. Privacy requests: privacy@markdify.com. Security and abuse: security@markdify.com. Nothing in this Policy removes a legal right or remedy that applicable law does not permit us to remove.