Privacy policy

About this policy

Markked is an invite-only knowledge base for your notes and ideas. This policy explains what information we receive, how we use it, and the choices you have.

Markked is operated by Rick, based in Indonesia. Rick is responsible for the personal information described in this policy. You can contact us at rick@markked.com.

This policy describes our data practices. It is not a waiver of your privacy rights or consent to every possible use of your information. The law that applies to you can provide additional rights and duties.

Information we receive

• Account details. Your email address, name, workspace membership, and account status. Passwords are stored as hashes, not as readable passwords.
• Your content. Notes, documents, uploaded files, edit history, and the permissions needed to save, sync, recover, and share your work.
• Sign-in and device details. Sign-in times, IP address, browser, operating system, device type, language, time zone, and screen and window size. These help us manage sessions, protect accounts, and investigate problems.
• Service records. Requests, errors, and performance information needed to run and protect the service. If you contact us, we also receive the information you include in your message.

If you sign in with Google

Google sign-in is optional. When it is available and you choose it, Google sends a signed identity token with your Google account ID, email address, email verification status, and, when present, your Google Workspace domain. The token can also contain your name and profile image; this sign-in flow does not save or use those two fields.

We use the verified identity to match an existing Markked account. We save the Google account ID, the linked Markked user ID, and the time the link was made. This lets you sign in again without depending on an email address that could change. Google sign-in does not create a Markked account.

We do not receive your Google password or request access to Gmail, Drive, Calendar, or other Google account content. We do not store Google identity tokens in browser storage or request logs. We use Google identity data for sign-in and account security, not advertising, sale, or AI model training.

Google processes the sign-in interaction under its privacy policy. Removing Markked from your Google connections does not delete your Markked notes or account.

How we use information

We use information to provide your account and workspace, save and sync content, apply access permissions, keep recovery history and backups, answer support requests, and prevent abuse. We also use service records to find and fix faults.

We process account and content information to provide the service you request, service and security records for our legitimate interest in running a safe and reliable service, and information needed to meet legal duties. Where processing relies on your consent, you can withdraw it by contacting us. This does not change the lawfulness of processing that took place before withdrawal.

Where the law requires a legal basis, we use only a basis that applies to that activity. A legitimate interest does not override your rights. If you do not provide the account or content information needed for a feature, we may not be able to provide that feature.

The current preview does not send your notes to an AI model provider. We will explain any new AI data use before you use that feature and update this policy when needed.

Who can receive information

Your workspace permissions control which other users can see shared content. Check the workspace and document access settings before adding information that you do not want to share.

We use Amazon Web Services to host the application and database, and Cloudflare for network protection, delivery, and file storage. Your browser also requests fonts from Google Fonts. These providers receive the information needed to deliver their services, which can include network and device information. Providers may process information outside your country.

Authorized people who run Markked may access information when needed to provide support, maintain the service, or investigate security problems. We may also disclose information when required by law or when needed to protect people, accounts, or the service. We do not sell your personal information.

International use and processing

Markked is operated from Indonesia, and the current application and database are hosted in Singapore. Our providers use networks and systems in other countries. Your information can therefore be processed outside the country where you live, under laws that differ from those in your country.

Applicable law can require a valid transfer mechanism and other safeguards before information is sent to another country. Use of Markked does not waive those requirements or replace any separate consent the law requires. Contact us for details about processing locations and the safeguards that apply to your information.

Cookies and browser storage

Markked uses cookies to keep you signed in and protect the sign-in flow. It uses browser storage for settings, local document state, and recovery of work that has not yet synced. Google may use its own storage when you choose Google sign-in.

You can remove cookies and site data through your browser. This signs you out and can remove local work that has not synced. Wait for your work to save before clearing site data. On a shared device, sign out and remove site data when you finish.

Retention and deletion

We keep account information and content while needed to provide your account and workspace. Edit history, deleted content, logs, and backups can remain after an item is removed from the app, for recovery, security, or legal needs. Deleting an item from view does not promise immediate removal from every copy.

We assess retention by the purpose of the record, whether your account or workspace is active, recovery needs, applicable legal periods, and unresolved security incidents or disputes. These reasons do not permit us to keep information indefinitely when the law requires its deletion.

You can request access, correction, export, or deletion of your personal information, or removal of a Google account link. We may need to verify your identity. Shared workspace records may also belong to other members, so a request to close your account does not automatically delete their work. We will explain any limits or records that must be kept when we handle your request.

Security and incidents

We use HTTPS and account and workspace access controls. Markked is not end-to-end encrypted, and no online service can guarantee complete security. Use a strong password, protect your Google account, and review who has access to your workspace.

Security errors or unauthorized access can still occur. This statement does not remove our duty to use safeguards required by law. If an incident requires notice to you or a regulator, we must provide that notice within the applicable legal deadline.

Your privacy rights

Depending on the law that applies and the type of processing, you can have rights to know about and access your information, correct it, obtain a portable copy, request deletion, restrict or object to processing, and withdraw consent. Some laws also provide a right to use an authorized agent, appeal a refused request, or exercise rights without unlawful discrimination.

Send requests to rick@markked.com. We may request enough information to verify your identity or your agent's authority. We will explain any lawful refusal or limit and any appeal process that applies, and handle requests within the applicable legal deadline.

If you are in the European Economic Area or the United Kingdom and the GDPR or UK GDPR applies, these rights include a complaint to your local data protection authority. You can find EEA authorities through the European Data Protection Board or contact the UK Information Commissioner's Office. You do not have to contact us first to use a right that the law gives you.

We do not use your personal information for cross-context behavioral advertising or sell it. We do not use the current preview to make solely automated decisions that produce legal or similarly significant effects on you. If our practices change, we must provide the notices and choices required by applicable law.

Children

The invite-only preview is intended for adults aged 18 or older. If you believe a child has provided personal information to Markked, contact us so we can investigate and take the action required by law.

Changes to this policy

We update this page when our data practices change and show the date above. We will give notice of material changes and request consent when required. The terms of service explain the conditions for using Markked.

Contact

For privacy questions or requests to access, correct, export, or delete your information, email rick@markked.com. Use the email address linked to your Markked account when possible. Do not send passwords or sign-in tokens.