Privacy Policy

Last updated: April 16, 2026

This policy explains what personal data RawMark collects, why, how long it is kept, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Data controller

RawMark is operated by WPSani.store, Torino, Italy, VAT no. 12343720012.
Contact: support@wpsani.store

2. Data we collect

Files you upload

Files uploaded for conversion are loaded into server memory, converted to Markdown, and immediately discarded. Nothing is written to permanent storage. Your documents never leave the conversion process.

IP address (free tier)

To enforce the 3 free-conversions-per-day limit, we store a hash-equivalent of your IP address together with a daily count. This data is automatically deleted after 30 days. Legal basis: legitimate interest (preventing abuse of a free service).

Email address and purchase data (paid plans)

When you purchase a plan, Stripe collects your payment details and email address on our behalf. We receive and store your email address linked to your license key, so we can provide support and send service-related communications. Legal basis: performance of a contract.

Analytics

We use Plausible Analytics, a privacy-first analytics tool. Plausible does not use cookies and does not collect any personally identifiable information. It processes only aggregate statistics (page views, referrers, country). No GDPR consent is required for Plausible.

3. Cookies

RawMark does not set any cookies on your browser. We use localStorage (a browser storage mechanism, not a cookie) to remember your conversion count and license key locally on your device. This data never leaves your browser except when explicitly sent to our API for validation.

The Stripe checkout page (hosted on stripe.com) may set cookies under Stripe's own privacy policy. This occurs on Stripe's domain, not ours.

4. Data retention

Uploaded files: never stored — discarded immediately after conversion.
IP rate-limit records: automatically deleted after 30 days.
License and email data: retained for the duration of your subscription or until you request deletion.

5. Third-party processors

Stripe, Inc. — payment processing. Stripe is a PCI-DSS Level 1 certified processor. We never see your full card number. Stripe Privacy Policy →
Plausible Analytics — aggregate website statistics. No personal data. Plausible Privacy Policy →
VPS hosting provider (DigitalOcean, Inc.) — server infrastructure within the EU.

6. Your rights

Under GDPR you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your data ("right to be forgotten").
Portability — receive your data in a machine-readable format.
Objection — object to processing based on legitimate interest.

To exercise any right, email us at support@wpsani.store. We will respond within 30 days.

You also have the right to lodge a complaint with the Italian data protection authority: Garante per la protezione dei dati personali.

7. Data transfers

Our server is hosted in the EU. Stripe may process payment data in the United States under the EU–US Data Privacy Framework. Plausible Analytics is hosted in the EU (Germany).

8. Changes to this policy

We may update this policy occasionally. The "last updated" date at the top will change when we do. Continued use of the service after a change constitutes acceptance.

9. Contact

Questions about privacy? Email support@wpsani.store.
We aim to reply within 48 hours.