Privacy Policy

This Privacy Policy explains how KODYO SRL (”Kodyo”, ”we”, ”us”) handles personal data in connection with the Markus application (the ”Software”) and our website.

We have built Markus to be local-first and privacy-respecting by design. The short version: the app itself does not collect your content, does not require an account, and does not track you.

#1. Data controller

Legal entity	KODYO SRL
Enterprise number	BE 1028.900.081
Registered office	Courbevoie 13, 1348 Louvain-la-Neuve, Belgium
Contact	support@getmarkus.app

We are the data controller for the personal data described in this policy, except where Lemon Squeezy acts as controller for payment data (see §4).

#2. The principle: the app does not collect your data

Markus is a desktop application that edits Markdown files stored on your own device.

• No account. You do not create or log into an account to use Markus.
• No content collection. The documents you write stay on your device. We do not receive, read, store, or transmit them.
• No cloud sync. Markus does not synchronize your files to our servers or anyone else’s.
• No telemetry or analytics inside the app. The Software does not send usage statistics, behavioural tracking, or crash reports to us by default.
• Offline license verification. Your license is verified locally using a cryptographic key; the app does not contact our servers for routine license checks.

The personal data we do process is limited to what is described below, and arises mainly from purchasing the Software and contacting support.

#3. What data we process and why

#a) Purchase and license data

When you buy a license, we receive limited order information from our payment provider so we can deliver and manage your license:

• Name and email address;
• Country (for tax purposes);
• License key and order reference;
• Whether the license is active or revoked.

Purpose: delivering your license key, providing customer support, preventing fraud and license abuse, and meeting our accounting and legal obligations. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing abuse and complying with the law (Art. 6(1)(c) and (f) GDPR).

#b) Support correspondence

When you email us, we process your email address and the content of your message.

Purpose: responding to and resolving your request. Legal basis: performance of a contract and our legitimate interest in providing support (Art. 6(1)(b) and (f) GDPR).

#c) Website data

When you visit our website, our hosting provider may process technical data such as your IP address and basic request logs for security and operational purposes.

Purpose: serving the website securely and reliably. Legal basis: legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR).

#d) Website analytics

With your consent, we use Google Analytics 4 (provided by Google Ireland Limited) to understand how our website is used — which pages and features people engage with — so we can improve it.

• Analytics runs in Google Consent Mode and is denied by default: no analytics cookies are set until you choose “OK” in the cookie banner.
• If you decline, Google still receives anonymous, cookieless signals that carry no identifier and cannot be used to recognise you.
• When you consent, Google Analytics sets cookies (such as _ga) to measure visits and interactions. We never collect your name, your email, or the content you type.
• You can change your choice at any time by clearing this site’s data in your browser, which brings the banner back.

Purpose: measuring and improving website usage. Legal basis: your consent (Art. 6(1)(a) GDPR); and our legitimate interest in basic, anonymised measurement where no consent is required (Art. 6(1)(f) GDPR).

Google acts as our processor for this analytics data and may process it outside the EEA under the safeguards described in §6. Google’s own handling of data is governed by Google’s Privacy Policy.

#4. Payments — Lemon Squeezy as Merchant of Record

Purchases are processed by Lemon Squeezy, acting as our Merchant of Record. For the payment transaction, Lemon Squeezy is the seller and processes your payment and billing data (including payment-card details, billing address, and tax information) as a controller for those purposes.

• We do not receive or store your full payment-card details.
• Lemon Squeezy’s handling of your data is governed by Lemon Squeezy’s own privacy policy, which applies to the checkout.
• We receive from Lemon Squeezy only the limited order data described in §3(a).

#5. Who we share data with

We share personal data only with:

• Lemon Squeezy, as described above;
• Google, as our website analytics provider (Google Analytics 4), where you have given consent (see §3(d));
• Service providers that help us operate (for example, email and hosting providers), under appropriate data-processing terms;
• Authorities, where required by law.

We do not sell your personal data, and we do not use it for advertising.

#6. International transfers

Some of our providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) to protect your data.

#7. Retention

• Order and license data: kept for as long as your license is active and thereafter as required for accounting and legal obligations (under Belgian law, accounting records are generally retained for 7 years).
• Support correspondence: kept for as long as needed to handle your request and a reasonable period afterwards.
• Website logs: kept for a short period for security and operational purposes.

#8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request erasure (“right to be forgotten”), subject to our legal retention obligations;
• Restrict or object to certain processing;
• Data portability;
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact support@getmarkus.app. We will respond within the timeframe required by law.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be.

#9. Children

Markus is a professional tool not directed at children. We do not knowingly collect personal data from children.

#10. Security

We apply reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, but the local-first design of Markus means most of your data — your documents — never leaves your device.

#11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the latest version. Material changes will be communicated through reasonable means.

#12. Contact

For any privacy question: support@getmarkus.app