Privacy Policy

Bukmarkz is operated as an independent product by [Operator name: person or company that runs Bukmarkz], 2716 HSR, 31st Main Road, 16th Cross, Bangalore 560102, India. For the EU General Data Protection Regulation (GDPR) we are the data controller. For India’s Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary, and you are the Data Principal.

Questions, requests and complaints: support@bukmarkz.com. For formal grievances, see section 5.

a) Account data

• Your email address and a login identity. Passwords are never stored by us in readable form: they are hashed by our authentication system. If you sign in with a third-party identity provider, we receive the profile details you authorise.
• Settings you choose (for example email preferences, language, and whether you have switched on the weekly digest).

b) Stored content (your vault)

• The links you save, titles, notes, highlights, tags and collections, and the tags and categories the extension or AI adds.
• An optional profile picture. We crop it to a square, shrink it to 256 pixels and remove its metadata (such as location), and we store only that resized copy.
• Text extracted from saved pages (and, where you use the feature, an archived copy or snapshot of the page).
• Voice notes you record (we keep the transcript and summary; the audio is sent for transcription, see section 3) and text from images you scan.
• Vector embeddings: lists of numbers generated from your content so we can search by meaning. They are derived from your content and are treated as your data.

c) Extension and app telemetry

• Technical data needed to run the service: IP address and request time (security and rate limiting), browser and extension version, device type, and error reports.
• Which action created an item (for example extension, mobile share, import) and when links were last checked.
• The extension only reads a page when you save it or use a feature that needs it. It does not record your browsing history.
• We use only the cookies and local storage needed to keep you signed in and remember your preferences. We do not use advertising trackers.

We obtain page content by fetching the public web address you save. We do not collect payment card data: Bukmarkz is currently a free beta.

We process your data to run your account, store and search your vault, extract page text, generate summaries and tags, answer questions about your vault, check for broken links, and send the emails you ask for. Our legal bases under the GDPR are performance of our contract with you (providing the service), your consent (for optional features, which you can withdraw), and our legitimate interests in security and preventing abuse.

• We use the providers’ business API services, under terms that do not allow them to train their models on API data. We do not turn on any setting that would permit it.
• Items you mark private are never sent to AI providers and are not included in AI search, MCP results or digests.
• AI output can be wrong. Summaries and tags are suggestions, and no decision with legal or similar effect about you is made by automated means.

Some providers process data outside the EU and India (for example in the United States). Where that happens we rely on a lawful transfer mechanism such as Standard Contractual Clauses or the provider’s certification under the EU–US Data Privacy Framework. A provider may keep API requests for a short period under its own terms (for example for abuse monitoring) before deleting them.

• Access and export. You can download your whole vault (links, notes, tags and highlights) at any time from Settings → Export, as JSON or as a standard browser-bookmarks HTML file. You can also ask us for a copy of the personal data we hold about you.
• Erasure / deletion. You can delete your account in Settings → Delete account, or email support@bukmarkz.com from your registered address. Deleting your account permanently removes your login, every saved link, note, highlight, tag, collection and snapshot, and all of your vector embeddings from our database. Deletion cannot be undone, and we cannot restore it afterwards. You can also delete single items at any time.
• Withdraw consent. Where we rely on your consent (for example optional AI features or marketing-style emails such as the weekly digest), you can withdraw it at any time in Settings or with the unsubscribe link in any email. Withdrawal does not affect processing done before, and it may mean a feature stops working.
• Correction and updating. You can edit your items and account details yourself, or ask us to correct them.
• Also under the GDPR: restriction of processing, objection to processing based on legitimate interests, and portability of your data in a commonly used format.
• Also under the DPDP Act: the right to nominate another person to exercise your rights if you die or become unable to.

Email support@bukmarkz.com to use any right. We may need to confirm it is you. We reply within 30 days. You may also complain to your local data protection authority (in the EU, the authority in your country of residence; in India, the Data Protection Board of India), but we ask that you give us the chance to fix it first.

If you have a complaint about how we handle your personal data, or about the exercise of your rights, contact our Grievance Officer:

Name / role

[Full name], Grievance Officer

Email

grievance@bukmarkz.com

Address

2716 HSR, 31st Main Road, 16th Cross, Bangalore 560102, India

Response time

Within 30 days of receiving your complaint

Please include your registered email address and a description of the problem. If you are not satisfied with our response, you may approach the Data Protection Board of India (under the DPDP Act) or your local EU supervisory authority (under the GDPR).

• Where it is stored. Your account data and vault are stored on secured servers in the European Union (Germany). Access is limited to what is needed to run the service.
• How long. We keep your data only until you delete your account. After deletion we do not retain your vault content, and we do not keep it for analytics. We may keep limited records we are legally required to keep, or need to handle a dispute, for as long as that requires.
• Who we share it with. Only the service providers in the table in section 3, and only for the purposes listed there. We do not sell your personal data, and we do not share it for advertising. We may disclose data if a law or a valid legal order requires it.
• Business changes. If Bukmarkz is ever transferred to another operator, we will tell you first and your rights in this policy will continue.

• Security. Data is encrypted in transit, access to each user’s vault is restricted by row-level security in the database, and secrets are kept out of the browser. No system is perfectly secure. If a breach is likely to put you at risk, we will notify you and the relevant authority as the law requires.
• Children. Bukmarkz is not intended for anyone under 18. We do not knowingly collect their data. If you think a child has an account, email support@bukmarkz.com and we will delete it.
• Changes. If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect. The date at the top shows the latest version.