CleanMD
Sign Up

Privacy Policy

Last updated: July 27, 2026

CleanMD (cleanmd.dev) is operated by Evoltron Ltd, a company registered in England and Wales (company number 09066999, registered office: C/O Azets River House, 1 Maidstone Road, Sidcup, Kent, DA14 5RH) (“we”, “us”). This policy explains what happens to your files and personal data when you use the service. The short version: your documents are converted inside your browser whenever possible, we never store your files, and every case where content does reach a server is declared in the interface before or while it happens.

Your files

  • Documents on the free tier (PDF, DOCX, PPTX, XLSX, CSV, HTML, TXT, MD) are converted entirely inside your browser. The file never leaves your device.
  • Web page URLs: our server fetches only the HTML of the page you paste; the conversion still runs in your browser.
  • AI-processed content: some conversions require our AI providers — images you upload or paste, scanned or dashboard-style PDF pages (sent as rendered page images), audio and video files, YouTube URLs, and — for Premium users who keep the option enabled — figures and display equations found inside documents (sent as cropped page images). This content is sent to our AI provider (currently Google Gemini) solely to produce your Markdown. Temporary files are deleted when the request completes and are automatically deleted by the provider within 48 hours. We do not use your content to train models.
  • No storage: on every plan, neither your original file nor the converted Markdown is stored after delivery. Files awaiting a one-shot unlock wait in your browser’s local storage (IndexedDB), not on our servers.

Personal data we process

  • Account (optional): your email address, used for passwordless sign-in (magic link or Google), and your plan tier. Stored with our authentication provider, Supabase.
  • Payments: handled by Stripe as merchant of record. We never see or store your card details; we keep records of your transactions (plan, amount, date).
  • Rate limiting: transient per-IP counters used to enforce daily free limits. They reset daily and are not linked to your identity.
  • Service telemetry: for AI-processed conversions we record token counts and computed costs to monitor spending. This telemetry never includes your content.
  • Analytics: we use Cloudflare Web Analytics, which is cookieless and does not profile you or track you across sites.
  • Product events: to understand aggregate usage (for example how many conversions complete, or how often the upgrade prompt is shown) we record product events tagged with a random identifier generated in your browser and kept in its local storage. The identifier is not derived from, or linked to, your name or email, and you can remove it at any time by clearing your browser data for this site. Events never include your files or their content.
  • Waitlist: if you join a waitlist, we store the email address you provide in order to contact you when the feature launches, and delete it on request.

Cookies

We only set cookies that are strictly necessary to keep you signed in (authentication session). There are no advertising or cross-site tracking cookies.

Service providers

We rely on a small set of processors to run the service: Cloudflare (hosting and analytics), Supabase (authentication and account data), Google (AI processing, only for the cases listed above), and Stripe (payments). Some providers process data in the United States under appropriate safeguards (such as the EU and UK data-transfer frameworks and standard contractual clauses).

Retention

Files: never stored. Account data: kept while your account exists. Transaction records: kept as long as tax and accounting law requires. Rate-limit counters: expire automatically within a day. Waitlist emails: kept until the feature launches or you ask us to remove you. Product events: kept only as long as they are useful to analyse product usage, and never enriched with your identity.

Your rights

Under the UK and EU GDPR you can request access to, correction of, or deletion of your personal data, ask for a portable copy, and object to or restrict processing. To exercise any of these rights — including deleting your account — email support@cleanmd.dev. You also have the right to lodge a complaint with your supervisory authority (in the UK, the ICO).

Changes

If we change this policy in a way that matters, we will update the date at the top of this page. Significant changes affecting account holders will be announced by email.