Privacy Policy

What we collect

Your phone number, which is the whole of your account — it is how you sign in, and we send a verification code to it to prove the number is yours. Alongside it: any billing details, the documents you upload for marking, the recipient lists you attach to them, and standard technical logs (IP address, browser, timestamps).

We do not ask for an email address or a password, and we do not use your number for anything but signing you in.

How we use it

To provide the service: marking documents, generating per-recipient copies, and resolving leak checks. Recipient lists are used only to label copies for you, and recipients are never contacted by us.

The marks inside a copy carry only an opaque random identifier, never a name or an email, and the mapping from identifier to recipient stays on our servers. This is true on both plans: Free and Pro mark a copy identically, and neither prints the label you typed into the file you send.

We do not sell personal data, and we do not use your documents to train models or for any purpose other than serving you.

Documents and retention

An uploaded original is kept for as long as the copies marked from it: 30 days after the newest copy is made, after which both are deleted. It is kept so that recipients can be added to a document you have already sent — each copy is marked from the original, never from another copy — and for nothing else. Marked copies and identifier mappings are kept for as long as your plan retains them, and are deleted when you delete the document. Deleting a document destroys its identifier mapping, after which a leak can no longer be traced.

Storage and security

Files are encrypted in transit and at rest. Access to production systems is limited, logged, and reviewed. Data residency and private deployment are arranged case by case; write to us.

To send your verification code we pass your phone number to Twilio, our SMS provider, who deliver the message and hold the code until you enter it. They process it on our behalf and for nothing else. No other part of your account, and none of your documents, reaches them.

Your rights

You can access, correct, export, or delete your data at any time. For any privacy request, write to hello@watermark.cx.