Legal

Privacy Policy

Effective date: 2026-09-11

1. Controller and contact

Your legal entity, Your registered address, operates RemoveMark and is the controller of account and service-use data. Privacy requests can be sent to legal@example.com.

2. Data we process

We process account details (email, optional name, password hash and session data), operation metadata, security and audit events, support messages, and files or text submitted for an operation. Stripe processes card details; we receive identifiers, status, amount and limited billing metadata, but not complete card numbers.

3. Purposes and legal bases

We use data to perform the service contract, authenticate users, process purchases, prevent abuse, secure and troubleshoot the platform, meet accounting or legal duties, and respond to requests. Where consent is required, it can be withdrawn without affecting earlier processing.

4. Processors and transfers

Data may be handled by infrastructure, object-storage, email, monitoring and payment providers configured for the deployment. Stripe acts as a payment provider. The operator must maintain the production subprocessor list and appropriate transfer safeguards. We do not sell submitted content or use it for advertising.

5. Uploaded content and retention

Uploads and generated results are private and accessible only through authenticated, ownership-checked requests. Inputs, results and abandoned uploads expire automatically after up to 24 hours unless an earlier deletion is requested or a shorter operational limit applies. Operation records may remain without file contents for support and audit purposes. Security logs, billing records and legally required financial documentation follow separate, documented retention periods.

6. Security

We use encrypted transport, hashed passwords, access controls, private storage, short-lived download links, rate limits and audit logging. No internet service can guarantee absolute security. Confirmed incidents are handled under the incident-response process and affected people or authorities are notified when legally required.

7. Your choices and rights

You can update or delete your account in settings. Depending on your jurisdiction, you may request access, correction, deletion, restriction, portability or object to processing, and complain to a supervisory authority. Some billing or security records may be retained where law or legitimate fraud-prevention needs require it.

8. Cookies

RemoveMark uses essential authentication and security cookies. The application does not require third-party advertising cookies. Any future optional analytics must be documented here and, where required, enabled only after consent.

9. Changes

Material changes will be published with a new effective date. Where law or the service contract requires it, registered users will receive additional notice.