Privacy Policy

1. Information we handle

• Website and analytics data: Cloudflare processes information needed to deliver and protect the site, such as IP address, request and routing data, device and browser information, and security events. Cloudflare Web Analytics may provide us with aggregate page views, approximate country, referring site, device type, and page-performance information.
• Connection data: When you connect Adobe, the plugin and our sign-in service process OAuth access and refresh tokens, short-lived transaction identifiers, encrypted credential-delivery data, and pseudonymous rate-limit data. The plugin stores credentials locally using UXP Secure Storage.
• Frame.io and document data: The plugin reads the Frame.io accounts, workspaces, projects, folders, stills or versions, filenames, identifiers, dimensions, file metadata, comments, and annotations that you choose and are authorized to access. It also reads limited information about the Photoshop document already open so it can verify the document and create the requested layers.
• Selected source image: To verify an exact match, the plugin may temporarily download the selected PNG directly from Frame.io to your device, up to the product's stated size limit. It processes that image in memory for verification, does not send it through the MarkupBridge sign-in service, and does not retain a central copy.
• Support data: If you contact us, we receive your email address, message, and any diagnostic information you choose to provide. Please do not send access tokens, signed URLs, credentials, private comments, customer files, or screenshots containing confidential work.
• Commerce data: Adobe Marketplace and FastSpring handle checkout and payment information. We may receive purchaser identity and contact information, entitlement status, and order, trial, subscription, refund, and royalty records. We do not receive or store complete payment-card numbers.

2. How we use information

We use information to connect the plugin to Adobe and Frame.io, display sources you can access, verify the selected source against the open document, import supported markup, maintain and revoke the connection, provide support, administer subscriptions, measure aggregate website performance, prevent abuse, secure the service, and meet legal obligations.

Where a legal basis is required, we process information as necessary to provide the service or take requested steps before providing it, for our legitimate interests in operating and securing MarkupBridge and assisting users, to comply with law, or with consent where applicable. MarkupBridge does not use customer content for artificial-intelligence training, advertising profiles, or automated decisions about people.

3. Where information stays and how long

• Creative content: Source-image bytes, comments, and annotations are processed in memory on your device during the import. Temporary source-image data is released after the check. Imported marks and review information remain only in the Photoshop document and its local MarkupBridge manifest until you or your organization removes them.
• Credentials: The plugin keeps OAuth credentials in UXP Secure Storage until they expire or you disconnect. Ordinary broker transactions and encrypted delivery or replay data expire after five minutes. Records needed to revoke credentials may remain until the applicable token expires and for up to 30 additional days so cleanup can complete.
• Website data: Cloudflare processes website traffic and security data on its global network. Cloudflare Web Analytics uses no cookies, local storage, or individual fingerprinting for analytics. Cloudflare currently retains unsampled Web Analytics data for seven days and makes aggregated analytics available for up to six months.
• Support: We normally retain support and privacy correspondence for 24 months after the request is resolved, then delete it unless it is still reasonably needed for security, a dispute, or a legal obligation.
• Commerce and legal records: We retain the records made available to us for as long as reasonably necessary to administer subscriptions, keep required tax and accounting records, resolve disputes, and comply with law.

4. Cookies and analytics

The MarkupBridge marketing website does not set cookies or use local storage for analytics. Cloudflare Web Analytics uses a privacy-focused performance beacon without tracking individuals over time. The separate auth.markupbridge.com sign-in service uses a secure, strictly necessary, short-lived cookie—no longer than five minutes—to complete and protect Adobe OAuth sign-in. We do not use advertising cookies.

5. When we disclose information

We disclose information only as needed to the providers that help operate MarkupBridge: Cloudflare for site delivery, security, aggregate analytics, and the OAuth broker; Adobe and Frame.io for authentication and authorized content access; Adobe Marketplace and FastSpring for trials, subscriptions, entitlements, payments, refunds, tax handling, and royalties; and our email provider for support and privacy correspondence.

We may also disclose information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a business transfer subject to appropriate safeguards. We do not sell personal information, rent it, disclose it for cross-context behavioral or targeted advertising, or use it to send marketing email.

6. International processing

MarkupBridge is operated from Minnesota in the United States. Cloudflare and other providers may process information in the United States and other countries where they operate. At launch, MarkupBridge is not intentionally directed or marketed to people in the European Economic Area or United Kingdom. We will update our regional arrangements and this policy before intentionally offering the product there.

7. Your choices and rights

You can disconnect MarkupBridge to request credential revocation and clear its local connection data. You control the Photoshop documents and layers created by the plugin and may remove them through Photoshop. Uninstalling the plugin by itself may not revoke an active Adobe connection, so disconnect first while online when possible.

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or a copy of personal information, or to object to certain processing. Send a request to support@markupbridge.com. We may need to verify your identity and may retain information where permitted or required by law. You may also complain to your local privacy regulator.

8. Security

We use safeguards designed for the limited information MarkupBridge handles, including encrypted transport, local secure credential storage, encrypted short-lived broker state, bounded access, and restricted service logging. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

9. Adults only

MarkupBridge is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so we can delete it.

10. Changes and contact

We may update this policy as MarkupBridge or applicable law changes. We will post the updated policy here, change the effective date, and provide additional notice when required.

For privacy questions or requests, email support@markupbridge.com or write to:
MarkupBridge
Attn: Privacy
4559 Trillium Dr N
Medina, MN 55340
United States