DEADMARK LEGAL

Privacy Policy

Effective October 12, 2026

This Privacy Policy explains how Humble Meteor, LLC, doing business as Deadmark (“Deadmark,” “we,” “us,” or “our”), handles personal information when you visit our site, join the waitlist, create an account, subscribe, use a workspace, or contact support.

1. Information we collect

Account and contact information

We collect your email address, authentication identifiers, account status, security settings, subscription selection, and dates associated with your account. Passwords are handled by our authentication provider and are not readable by Deadmark.

Workspace and customer content

We process project names, optimized image working copies, reference images, annotations, comments, logos, export settings, and related metadata that you choose to store in Deadmark. We do not need your original source files; keep your own originals and backups.

Billing information

Stripe processes payment details. Deadmark receives billing status, plan, Stripe customer and subscription identifiers, transaction amounts, tax information, and limited payment-method details such as brand and last four digits. We do not receive or store your full card number.

Support information

When you report a problem, we collect the category, description, expected result, reproduction steps, page and build information, and any screenshot you choose to attach. Attachments are stored privately and viewed through short-lived access links. Do not include sensitive information you do not need us to see.

Product and technical events

We record limited first-party events needed to operate and understand the product, such as verified signup, project creation, failed operations, storage usage, and service errors. Vercel Web Analytics also provides anonymous, aggregate page-view, referral, campaign, country, browser, operating-system, and device-type statistics without analytics cookies or session replay. Deadmark removes URL fragments and all query parameters except standard utm_ campaign fields before these page-view events are sent. Hosting and security providers may process IP address, browser, device, request, and diagnostic information in operational logs.

Waitlist information

If you join the launch waitlist, we collect your email, optional answer about what you make, signup time, and the consent version you accepted. For abuse prevention, we briefly keep a daily-changing keyed hash derived from your network address rather than the raw address in the waitlist database.

2. How we use information

provide, authenticate, secure, and support Deadmark;
store projects and generate requested exports;
process subscriptions, taxes, refunds, and account access;
send verification, billing, security, support, and service messages;
measure reliability and improve product workflows using limited first-party events;
prevent abuse, fraud, unauthorized access, and technical failures;
comply with law and enforce our agreements; and
send launch or marketing updates only when you have requested them.

We do not sell personal information. We do not use Customer Content for behavioral advertising, and we do not use third-party advertising trackers or session-replay tools in the workspace. Vercel Web Analytics is used only for aggregate site measurement.

3. When information is shared

We share information only as needed with service providers acting for us, including Vercel for hosting, Supabase for authentication, database, functions, and private storage, Stripe for payments and billing, Resend for transactional email, and Cloudflare for waitlist abuse protection and encrypted backup storage. We may also disclose information to comply with law, protect rights or safety, investigate abuse, or complete a merger, financing, acquisition, or sale, subject to appropriate safeguards.

Customer-created PDFs and files are shared with recipients only when you download or send them. Once a file leaves Deadmark, the recipient’s handling is outside our control.

4. Data retention

Active accounts and content: retained while the account is active and as needed to provide the Service.
After cancellation: workspace content remains available in read-only form for 30 days after paid access ends, then may be deleted from active systems.
Verified deletion requests: authoring is blocked promptly, a seven-day safety delay applies, then primary workspace and account data is deleted unless a legal or security hold applies.
Encrypted backups: deleted data may remain in access-restricted rotating backups for up to 30 additional days before aging out.
Financial and tax records: transaction, invoice, tax, and refund records may be kept for seven years.
Deletion audit: a minimal record of the verified request and completion may be kept for three years without retaining deleted Customer Content.
Support attachments: retained only as long as reasonably needed to investigate the report, then deleted under our support-retention process.
Waitlist: waitlist records and aggregate signup counts are retained for up to 12 months; rate-limit records expire after two days.
Provider logs: infrastructure providers retain operational logs according to their own documented schedules.

We may preserve information longer when reasonably necessary for an active dispute, fraud investigation, security incident, legal hold, or other legal obligation. We do not keep Customer Content merely because tax records must be retained.

5. Security

We use administrative, technical, and organizational safeguards designed for the nature of the information, including access controls, private object storage, encrypted transport, server-side entitlement checks, signed payment webhooks, restricted support access, and encrypted backups. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

6. Your choices and requests

You may update account information in the Service, manage billing through Account → Billing & plan, and unsubscribe from optional marketing messages using the link in those messages. Transactional account, security, billing, and support messages are necessary to operate the Service.

You may request access, correction, export, or deletion of personal information by emailing hello@deadmark.app. We will verify that you control the account before acting. We may deny or limit a request where permitted by law, and we will explain the reason. Deleting an account does not erase records that we must retain for tax, fraud-prevention, dispute, or legal purposes.

7. Pennsylvania and other privacy rights

Deadmark is operated from Pennsylvania in the United States. Depending on where you live, applicable law may provide additional rights or appeal procedures. Contact us to exercise a right; we will apply the law that covers your request. Information may be processed in the United States and other places where our providers operate.

8. Children

Deadmark is for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information.

9. Changes to this Policy

We may update this Policy as the Service changes. We will post the new effective date and provide reasonable notice of material changes through email or the Service when appropriate.

10. Contact

Deadmark is operated by Humble Meteor, LLC, doing business as Deadmark. For privacy questions or requests, email hello@deadmark.app.