Privacy Policy

1.1 Document Content

We do not collect sensitive personal data such as race, religion, political beliefs, health information, or government-issued identifiers from your documents.

1.2 Device & Technical Information

When you visit or use Watermark in Word (even without registering), we automatically collect certain non-personal, technical data to ensure our site runs smoothly:

• Device type and operating system (e.g., Windows, macOS, Linux, iOS, Android)
• Browser type and version (e.g., Chrome, Firefox, Safari)
• Screen resolution and viewport size
• Unique device identifiers (e.g., browser fingerprinting tokens, cookies)
• IP address (stored only in truncated or anonymized form)

1.3 Usage Data & Interaction Logs

To improve our services, we record aggregated, non-identifiable metrics such as:

• Timestamped page views and tool usage patterns
• Watermark type selection (text vs. image)
• Error and crash reports (stack traces and HTTP status codes, stripped of any document content)
• Processing completion rates and performance metrics

1.4 User Preferences

We may store non-personal preferences in your browser (via cookies or local storage) such as:

• Theme preference (light or dark mode)
• Language selection
• Last used watermark settings (for convenience)

These preferences are stored locally in your browser and not transmitted to our servers.

2.1 To Provide & Maintain Our Services

• Document Processing: Temporarily store and process your Word documents to apply the requested watermark (text or image).
• Feature Delivery: Generate and deliver the watermarked document back to you for download.
• Service Optimization: Maintain optimal processing speed and reliability for all users.
• Security Verification: Use Cloudflare Turnstile to prevent abuse and automated attacks when necessary.

2.2 To Improve User Experience

• Usage Analytics: Analyze aggregated logs to determine which tools are most popular, how long users spend on each page, and where improvements are needed.
• Performance Monitoring: Track page load times, API response times, and error rates to optimize site speed and reliability.

2.3 To Communicate With You

• Support & Inquiries: Respond to support requests and troubleshoot technical issues via email if you contact us.
• Service Updates: Display important notices about service changes or maintenance directly on the website.

We do not send marketing emails or newsletters since we don't collect email addresses through the tool.

2.4 To Ensure Security & Prevent Abuse

• Abuse Prevention: Monitor for unusual upload patterns or suspicious activity to protect server resources and prevent service abuse.
• DDoS & Malicious Activity Mitigation: Use Cloudflare Turnstile, firewall rules, and rate limiting to block or throttle abusive requests.
• Malware Scanning: Scan uploaded files for viruses or malicious code to protect our infrastructure and other users.

2.5 To Comply with Legal Obligations

• Law Enforcement & Legal Requests: Cooperate with valid subpoenas, court orders, or other legal processes when required by law.
• Regulatory Compliance: Maintain anonymized usage logs as needed to comply with applicable regulations.

3.1 Service Providers & Subprocessors

We engage third-party vendors to perform services on our behalf. These providers are contractually obligated to process your information only for the purposes we specify and to maintain confidentiality. Examples include:

• Hosting & Infrastructure (Cloudflare Workers)
• Security & Bot Protection (Cloudflare Turnstile)
• Analytics & Performance Monitoring (e.g., Google Analytics, if enabled)
• Error Tracking (e.g., Sentry, if enabled)

Important: None of these providers have access to the content of your Word documents. Document processing happens on our secure servers and files are immediately deleted after processing.

3.2 Legal Compliance & Protection

• Law Enforcement & Legal Requests: Watermark in Word may disclose personal information if required by a valid subpoena, court order, or other governmental request. We will notify you of such disclosures unless prohibited by law.
• Protecting Our Rights & Safety: If we believe your actions violate our Terms of Service or pose a security threat to other users, we may share relevant data (e.g., truncated IP logs) with authorities or affected parties.

3.3 Business Transfers

In the event Watermark in Word undergoes a merger, acquisition, or asset sale, your personal information may be transferred as part of the business transaction. We will notify you of any change in ownership or use of your data prior to such transfer, and the new entity will be bound by this Privacy Policy (or a policy substantially similar).

4.1 Encryption & Secure Storage

• Data in Transit: All communication between your browser and our servers is encrypted using HTTPS (TLS 1.2 or higher).
• Data at Rest: Sensitive data (e.g., passwords) are hashed with a strong algorithm (e.g., bcrypt or Argon2). Payment details are never stored on our servers; all transactions are processed directly by our third-party payment partners (e.g., Stripe).

4.2 Access Controls & Authentication

• Least-Privilege Access: Only authorized employees and contractors have access to production systems and databases.
• Multi-Factor Authentication (MFA): We enforce MFA for all administrative accounts with access to sensitive data.

4.3 Regular Audits & Monitoring

• Security Audits: We perform periodic code reviews, vulnerability scans, and penetration tests.
• Logging & Alerting: Real-time monitoring for unusual activity (e.g., multiple failed login attempts, SQL injection patterns) with automatic alerts to our security team.

4.4 Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

1. Investigate and contain the breach immediately.
2. Notify you via email within 72 hours of confirming that it impacted your personal data, as required by applicable laws (e.g., GDPR).
3. Provide guidance on steps you can take to protect yourself (e.g., resetting your password).

5.1 Essential Cookies

• Session Management: Remember your authenticated session (so you don't have to log in on every page).
• Load Balancing & Security: Distribute traffic across our servers and detect malicious bots.

5.2 Analytics & Performance Cookies (Optional)

• Google Analytics / Sentry: We collect anonymized, aggregated usage data (e.g., page views, bounce rate) to improve site performance and user flow.
• Opt-Out: You may disable analytics cookies by clicking "Do Not Track" in your browser settings or installing a cookie-blocking extension. Note that blocking essential cookies may impair certain site functions.

Usage Logs & Analytics

Aggregated, anonymized usage data may be stored for up to 12 months for service improvement purposes.

Error Logs & Performance Data

Retained for up to 90 days for debugging and optimization; then permanently deleted. No document content is included in error logs.

Security & Abuse Logs

IP addresses and security-related data retained for up to 30 days to prevent and investigate abuse.