Privacy Policy

1. Introduction

Welcome to JustMD ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our markdown editor service.

By using JustMD, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

• Email address
• Name
• Password (encrypted)
• Google account information (if you use Google OAuth)

2.2 Content Data

We store the content you create and manage within JustMD, including:

• Markdown documents you create
• Document titles and metadata
• Folder organization
• Document sharing settings

2.3 Authentication Data

For security purposes, we may collect:

• Two-factor authentication secrets (encrypted)
• Recovery codes (encrypted)
• Login timestamps

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our service
• Authenticate your identity and manage your account
• Store and manage your documents and content
• Enable document sharing features
• Send important service notifications
• Improve and optimize our service
• Protect against unauthorized access and abuse

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Passwords are encrypted using bcrypt hashing
• Authentication uses JWT tokens stored in httpOnly cookies
• Two-factor authentication secrets are encrypted at rest
• All data is stored in secure PostgreSQL databases
• HTTPS encryption for data in transit

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your consent: When you explicitly share documents with other users
• Service providers: With trusted third-party service providers who assist in operating our service (e.g., cloud hosting)
• Legal obligations: When required by law or to protect our rights and safety
• Google OAuth: When you use Google sign-in, we receive basic profile information from Google

6. Document Sharing

JustMD allows you to share documents with other users. When you share a document:

• You can share via email with specific users
• You can make documents publicly accessible via a link
• Shared users can view but not edit your documents (unless they are the owner)
• You maintain full control and can revoke access at any time

7. Data Retention and Account Deletion

We retain your information for as long as your account is active or as needed to provide services:

• Documents: Deleted documents are soft-deleted and permanently removed after 30 days
• Account Deletion: When you delete your account, it is soft-deleted for 30 days
• Recovery Period: You can restore your account by logging in within 30 days of deletion
• Permanent Deletion: After 30 days, your account and all associated data are permanently deleted
• Automatic Restoration: Logging in during the 30-day period automatically restores your account and all data
• Legal Retention: We may retain certain information as required by law or for legitimate business purposes

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access your personal information through your account settings
• Correction: You can update your account information at any time
• Deletion: You can delete your documents and account through the settings menu
• Account Recovery: Deleted accounts can be restored by logging in within 30 days
• Export: You can copy and export your document content at any time before deletion
• Opt-out: You can disable features like two-factor authentication

9. Cookies and Tracking

We use cookies and similar tracking technologies:

• Authentication cookies: httpOnly cookies to maintain your login session
• Preference cookies: To remember your settings (e.g., theme preference)
• We do not use third-party advertising or analytics cookies

10. Third-Party Services

JustMD integrates with the following third-party services:

• Google OAuth: For optional Google sign-in (governed by Google's privacy policy)
• Cloud hosting providers: For secure data storage and service delivery

These third-party services have their own privacy policies, and we encourage you to review them.

11. Children's Privacy

JustMD is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

12. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction. By using JustMD, you consent to such transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.