1.Data controller
The data controller for the personal information processed through the Service is Joshi LLC (doing business as Remarkdown LLC). For questions about this Policy or to exercise any of the rights described in §7, contact Hitesh Joshi at support@remarkdown.org.
2.Information we collect
Account information. When you sign up, our identity provider (PropelAuth) records the email address you supply. We receive that email and a stable user identifier from PropelAuth and store them so the Service can recognize you on return visits.
reMarkable device token. When you pair a reMarkable tablet with the Service, your tablet issues a device-scoped token to the Service. We store that token encrypted at rest using a key held only by our Worker. We do not see, store, or transmit your reMarkable account password.
Audit log. We record an audit entry each time an MCP client connected to your account invokes one of our tools. Each entry contains: the action (for example, "push" or "list"), the MCP client identifier where supplied, a timestamp, the document title supplied to the tool, and the outcome (uploaded, failed, and so on).
Document index. To list and search your library without a slow request to the reMarkable cloud on every call, we keep a cached index of your documents' and folders' names, types, and folder structure. This index holds names and organisation only, never the contents of your documents. It refreshes periodically while your reMarkable is paired, and we delete it when you unpair your tablet or delete your account.
Document contents. We do not retain the contents of documents you push to your reMarkable. When you push a markdown document, the Service converts it to a native reMarkable notebook in memory and uploads it directly to the reMarkable cloud associated with your tablet. The converted file is not persisted on our servers. (Reading document contents back into an AI client is a separate, opt-in paid feature governed by the Document Reading Addendum; it is off unless you enable it.)
Operational data. Cloudflare, our hosting provider, processes request logs containing IP addresses, user-agent strings, and timing information in accordance with its own privacy notice.
Product analytics. We use PostHog to understand how
the site is used and to catch errors. It records page views, clicks,
and browser/device information, and captures JavaScript errors so we
can fix crashes. This data is served through our own domain
(l.remarkdown.org) and used only to improve the Service —
we do not sell it or use it for advertising. PostHog processes it as
our analytics provider under its own privacy notice.
Cookies. We set a first-party session cookie
(remarkdown_sid) to keep you signed in; it contains an
opaque session identifier and no personal data. PostHog sets its own
first-party cookies to recognise returning visitors for analytics.
PropelAuth may set additional cookies on its own domain
(auth.remarkdown.org) during authentication.
3.How we use information
We use the information we collect to:
- authenticate you and maintain your signed-in session;
- operate the MCP tools on your behalf, including pairing with your reMarkable and pushing or retrieving documents at your request;
- display your activity history on your dashboard;
- diagnose service issues and prevent abuse;
- communicate with you about the Service when necessary.
We do not sell or rent your personal information. We do not use your information for advertising. We do not perform automated decision-making that produces legal or similarly significant effects on you.
4.Service providers and disclosures
We rely on the following service providers to operate the Service. Each processes data only to the extent necessary to deliver its function and is contractually bound by its own privacy commitments.
| Provider | Role | Data processed |
|---|---|---|
| Cloudflare, Inc. | Hosting, routing, edge caching | Request logs (IP, user-agent, timing) |
| PropelAuth, Inc. | Identity and OAuth | Email address, stable user ID |
| PlanetScale, Inc. | Application database (via Cloudflare Hyperdrive) | Email, encrypted device token, audit log entries |
| reMarkable AS | Tablet cloud sync API | Per-request device token; document contents in transit |
| OpenAI | AI model provider (handwriting transcription for Document Reading) | Rendered page images of handwritten pages, sent for transcription |
| Resend | Transactional and lifecycle email | Email address, name |
| Stripe, Inc. | Subscription billing | Billing details and customer identifiers |
| Composio | Integration federation (inbox, calendar, and other apps you connect) | Content from apps you connect, routed to your tablet |
| PostHog, Inc. | Product analytics and error monitoring | Page views, clicks, browser/device info, JavaScript errors |
We do not disclose your personal information to anyone else except (a) where required by applicable law, (b) in response to a valid legal request, or (c) where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Joshi LLC (doing business as Remarkdown LLC), our users, or others.
5.Retention
We retain your account data for as long as your account is active. When you delete your account from auth.remarkdown.org/account, we remove your email address, your encrypted device token, and your audit log entries from our database within thirty (30) days.
Operational logs maintained by Cloudflare, PropelAuth, PlanetScale, PostHog, are retained according to those providers' own policies.
6.Security
We encrypt your reMarkable device token at rest using a key held only by the Cloudflare Worker that operates the Service. All data in transit between you, the Service, and the reMarkable cloud is sent over TLS. We apply commercially reasonable administrative, technical, and physical safeguards designed to protect your information.
No system is perfectly secure. We do not guarantee that the Service will be free of vulnerabilities. If you believe you have discovered a security issue, please email support@remarkdown.org.
7.Your rights
Depending on the laws of your jurisdiction, you may have rights to:
- access the personal information we hold about you;
- correct inaccurate or incomplete information;
- request deletion of your information;
- object to or restrict certain processing activities;
- request portability of your information; and
- withdraw any consent you previously gave.
You may exercise any of these rights by emailing support@remarkdown.org. We will respond within the period required by applicable law. If you are in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local data protection authority. If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to request its deletion.
8.Children
The Service is not directed to individuals under the age of sixteen (16). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@remarkdown.org and we will take steps to delete it.
9.International data transfers
The Service is operated using infrastructure located in multiple regions around the world. By using the Service, you understand that your information may be transferred to and processed in countries other than the country in which you reside. We rely on the cross-border transfer mechanisms maintained by our service providers (including Standard Contractual Clauses where applicable).
10.Changes to this Policy
We may update this Policy from time to time. We will post the revised version on this page with an updated "Last updated" date. Material changes will be communicated through the Service before they take effect.
11.Contact
Joshi LLC (doing business as Remarkdown LLC) — c/o Hitesh Joshi
support@remarkdown.org