Legal terms and conditions.

The controller of personal data processed through the Service is MaffeiTech Information Technology L.L.C., a limited liability company based in Dubai, United Arab Emirates.

Maffei-Markdown (also referred to as Maffei-MD) is an online text-to-markdown editor published under the MaffeiFlow product line of MaffeiTech. The company website is www.maffeitech.com.

This Privacy Policy applies to:

• the web application available at https://md.maffeiflow.com and related paths (including temporary share pages);
• our processing of information when you use editor features such as import, export, version history, cookie settings, and share links; and
• communications you send us about the Service (for example, email to info@maffeitech.com).

It does not apply to third-party websites or services that we do not control, even if linked from the Service.

Depending on how you use the Service, we may process the categories below. We do not currently require you to create an account to use the editor.

• Content you create or upload. Text, markdown, HTML derived from your content, images referenced by URL, and files you import. Most of this remains on your device (see Section 4).
• Shared content. If you create a share link, the markdown you submit is transmitted to our servers and stored temporarily so a recipient can open it (see Section 5).
• Technical data. IP address, user-agent string, request timestamps, approximate geolocation derived from IP (if provided by our hosting/CDN providers), and security/rate-limit metadata (see Section 6).
• Preference data. Theme and cookie-consent choices stored locally on your device.
• Correspondence. If you contact us, we process the content of your message and contact details you provide.

We do not intentionally collect special categories of personal data (such as health, biometric, or precise geolocation data) through the Service. Please do not place highly sensitive personal data in share links.

The Service is designed so that day-to-day editing happens in your browser. Using browser storage technologies (including localStorage), the Service may keep on your device:

• editor drafts;
• version-history snapshots (limited number of recent versions);
• theme preference (light / dark / system); and
• cookie / preference consent choices.

This local data is not transmitted to MaffeiTech unless you take an action that sends it (for example, creating a share link, or contacting us and pasting content into an email). You can delete local data by clearing site data in your browser or using in-app controls where available.

When you use the share feature, you instruct us to store the submitted markdown so that anyone with the generated URL can open a forked copy in the editor.

• Shared content is stored in our Redis-backed share store for a limited time (currently approximately 1 hour from creation) and then expires automatically.
• Share payloads are size-limited (currently up to about 500 KB) and pass through sanitization intended to strip common dangerous markup patterns.
• Share creation is rate-limited by IP address to reduce abuse.
• A share URL is an unlisted capability URL. Anyone who obtains it during its lifetime can access the shared content. Do not share confidential information via this feature.
• Edits made by a recipient on the shared page remain local to that recipient’s browser and do not update the original shared payload.

When your browser requests our application or APIs, our hosting, CDN, and application infrastructure may automatically receive and log technical information such as IP address, request path, status codes, timestamps, and user-agent. We use this information to operate, secure, and troubleshoot the Service, including IP-based rate limiting and blocking of abusive traffic.

The Service uses necessary local storage for core functionality (editor drafts, theme, consent record). Preference categories presented in the cookie settings dialog are controlled by your choices and stored locally.

We do not currently operate third-party advertising cookies as part of the core editor experience. If we introduce additional analytics or marketing technologies that require consent where legally required, we will update this policy and the consent UI before enabling them.

You can manage preferences through the cookie settings control in the site footer and through your browser settings.

We use information for the following purposes:

• to provide, maintain, and improve the Service (including editor features, share links, import/export, and security controls);
• to prevent abuse, fraud, and attacks (rate limiting, security headers, sanitization, and operational monitoring);
• to remember your local preferences on the same device;
• to respond to your inquiries and provide support; and
• to comply with applicable law and enforce our Terms of Service.

We do not sell your personal information.

Where a legal basis is required under applicable data-protection law (including, where applicable, the UAE PDPL and, for individuals in the EEA/UK, the GDPR/UK GDPR), we rely on one or more of the following:

• Performance of a contract / requested service — providing the editor and share-link features you request;
• Legitimate interests — securing and operating the Service, preventing abuse, and improving reliability, balanced against your rights;
• Consent — where we ask for it (for example, optional preference categories), which you may withdraw at any time; and
• Legal obligation — where we must retain or disclose information to comply with law.

We may share information with service providers that process data on our behalf to host and operate the Service (for example, application hosting, content delivery, and temporary share storage). These providers are authorized to process information only as needed to perform services for us and are required to protect it appropriately.

We may also disclose information:

• if required by law, regulation, legal process, or governmental request;
• to protect the rights, safety, or property of MaffeiTech, our users, or the public; or
• in connection with a corporate transaction (for example, merger, acquisition, or asset sale), subject to appropriate confidentiality safeguards.

Authentication, user profiles, and cloud document sync are scaffolded in the codebase but are not enabled in production at the time of this policy. If those features launch, we will update this Privacy Policy before collecting account credentials or synced documents.

• Local drafts and preferences remain on your device until you clear them.
• Shared documents are deleted automatically when their time-to-live expires (currently about 1 hour).
• Security / rate-limit records are retained only as long as reasonably necessary for security and operations.
• Support correspondence is retained as long as needed to handle your request and for legitimate business records.

We implement technical and organizational measures appropriate to the nature of the Service, including HTTPS transport, security headers, request rate limiting, and sanitization of imported/shared markdown. No method of transmission or storage is completely secure. You are responsible for keeping share URLs confidential and for not placing secrets or highly sensitive personal data into shared content.

MaffeiTech is based in the United Arab Emirates. Our hosting and infrastructure providers may process data in other countries. Where personal data is transferred internationally, we take steps designed to ensure an appropriate level of protection consistent with applicable law (for example, contractual safeguards with processors).

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a competent supervisory authority.

Because most editor content lives on your device, the fastest way to delete local drafts is to clear site storage in your browser. For share links, wait for expiry or contact us if you need assistance regarding a specific share identifier you created.

To exercise rights relating to personal data we hold, email info@maffeitech.com. We may need to verify your request before responding.

The Service is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. The “Effective / last updated” date at the top will change when we do. Material changes will be indicated by updating this page. Continued use of the Service after an update means you acknowledge the revised policy.

Privacy inquiries for Maffei-Markdown / Maffei-MD:

• Company: MaffeiTech Information Technology L.L.C.
• Email: info@maffeitech.com
• Location: Dubai, United Arab Emirates
• Website: www.maffeitech.com
• Phone (UAE): +971 566 716 716