Rights and data requests

This page describes your rights regarding data Markdrip processes through the licensing channel, and how to submit a request. For voice data rights see the Biometric & Voice Data Notice. For an overview of what data is processed and why, see Privacy & Local-First Guarantees.

Contact: [email protected]

What rights you may have

Depending on your location, applicable law may give you some or all of the following rights regarding data Markdrip holds about you:

Access. Request a copy of the personal data we hold about you.
Correction. Request correction of inaccurate data.
Deletion / erasure. Request deletion of your data, subject to the narrow exceptions below.
Restriction. Request that we limit processing while a dispute is resolved.
Objection. Object to processing based on our legitimate interests.
Portability. Where processing is based on consent or a contract and is automated, receive your data in a structured, machine-readable format.

U.S. state privacy rights

If you are a resident of a U.S. state with a comprehensive consumer privacy law (including California, Texas, and others), you may additionally have rights to:

Know what personal information we have collected, used, disclosed, or shared.
Delete personal information we hold about you.
Correct inaccurate personal information.
Opt out of sale or sharing for targeted advertising. Markdrip does not sell your personal information or share it for targeted advertising.
Non-discrimination. We will not discriminate against you for exercising your privacy rights.
Appeal. If we deny your request, you may appeal that decision by replying to our denial email.

What data we can act on

Markdrip can process rights requests regarding:

Account records (if you purchased via the web): your email address, plan and billing status, and purchase history.
License and activation records: activation identifiers and status.
Trial records: pseudonymous trial subject records (see below for local/pseudonymous route).
Licensing-security records: encrypted IP records associated with your trial or activation (see deletion schedule below).

Markdrip cannot act on your content (transcripts, notes, summaries, voice data, audio) because that data never reaches us — it exists only on your device, entirely under your control.

How to submit a request

Email [email protected] with:

A brief description of your request (access, deletion, correction, etc.)
The email address associated with your purchase or account, or, if you have no account, a description indicating you are a trial or pseudonymous subject (see below).
Any details that help us locate your record (for example, approximate trial start date or the platform you used).

We do not require you to create an account to submit a request.

Pseudonymous-subject route

If you are a trial subject with no associated account email, email us describing your request and your approximate trial start date and platform. We will provide an alternate identity-verification path that does not require disclosing additional personal information beyond what is necessary to locate and confirm the record.

Identity verification

We verify your identity before acting on access, deletion, or portability requests to prevent fraudulent or erroneous modifications. For account holders, we verify against the email on file. For pseudonymous subjects, we use an alternate path as described above.

We will not require you to create an account or provide more information than is reasonably necessary to verify and fulfill your request.

Response timeline

We aim to acknowledge your request within 3 business days and to complete or substantively respond within 45 days. Where legally required response periods differ (for example, 30 days under certain state laws), we will meet the applicable deadline. We will notify you if we need an extension.

Deletion: what happens and how long it takes

When we process a verified deletion request:

Account, license, and activation records: live records and replicas are deleted promptly; affected backups age out within 35 days.
Licensing-security (IP) records: primary records and replicas are removed within 30 days; affected backups age out within a further 35 days. Immutable audit entries that contain no raw IP may be retained where narrowly necessary as lawful evidence.
Trial records: the trial row is removed. Deletion does not reset trial eligibility or issue a new trial; if you reinstall after deletion, the result is treated as a new device with no prior trial record.

We cannot delete data we do not hold. Your on-device content is outside our control and cannot be touched by a request to us.

Exceptions and narrow retention

We may retain data beyond the standard schedule to the minimum extent required by:

Applicable law (financial records, tax obligations, chargeback evidence).
Active legal proceedings or a valid legal hold.
Fraud, abuse, or security investigation evidence, where retention is necessary and proportionate.

Where we rely on an exception, we will tell you in our response.

How to contact a regulator

If you believe we have not handled your data lawfully, you may lodge a complaint with the relevant supervisory authority. Examples:

EU residents: your national data-protection authority (find it at edpb.europa.eu/about-edpb/about-edpb/members_en).
UK residents: the Information Commissioner’s Office (ico.org.uk).
California residents: the California Privacy Protection Agency (cppa.ca.gov).
Texas residents: the Texas Attorney General Consumer Protection (texasattorneygeneral.gov/consumer-protection).

We would prefer the opportunity to address any concern directly first.

Updates

We may update this page as our practices or applicable law change. The current version will always be available here; material changes will be noted in What’s New.