Privacy Policy
Last updated: 10 July 2026
This describes what we collect and why.
1. What we collect
Account data (email, display name) and the documents you create. When you use AI features, the text you select plus a little surrounding context and your instruction are sent to an AI model provider to generate a result — to our platform provider (currently Anthropic) for included DotMD AI, or to the provider you configure when you Bring Your Own Key. AI provider keys are encrypted and never logged in plaintext.
2. Analytics
We collect a minimal set of product-analytics events to understand usage, including for visitors viewing a publicly shared document:
- time spent on a document
- which document was viewed
- device type (desktop / mobile)
- rough location (country-level, derived from IP — never stored as a precise location)
- whether an interaction was blocked (a “block-hit”) and whether a session was abandoned (a “drop”)
3. Telemetry
Operational telemetry (errors, performance timings) is minimized. We do not write the content of your documents to logs.
4. Data residency
Your documents and account data are stored in a single region: the United States (AWS, us-west-2). We do not replicate your content across regions.
If you access DotMD from outside the United States — for example from the EU, the UK, or India — your data is transferred to and processed in the United States. Where required, we rely on appropriate safeguards for that transfer, such as the European Commission’s Standard Contractual Clauses. Contact us if you would like more detail.
5. Data deletion
You can delete any document or your entire account at any time. When you delete your account, your documents are deleted without undue delay and residual copies in backups are removed as those backups expire.
6. AI features and your data
DotMD offers AI in two ways. With included DotMD AI (Premium), the text you select plus a bounded amount of surrounding context and your instruction are sent to our platform model provider — currently Anthropic — using DotMD’s own key, up to the monthly token allowance in our Terms. With Bring Your Own Key (BYOK), that same content is sent instead to the provider endpoint you configure with your own key (such as OpenAI, Anthropic, Google Gemini, or a compatible endpoint).
In both cases we send only the selected text, its immediate context, and your instruction — not your whole document or library. We do not use your prompts or document content to train our own models, and we do not store AI provider keys in plaintext. When you use a third-party model, including via BYOK, that provider’s own terms and privacy practices govern the data you send it.
8. Your choices
You can export or delete your data at any time. Contact us at
support@dotmd.coto exercise your rights.