Privacy Policy

Last updated: 2026-07-29

This Privacy Policy describes how DataOps, s.r.o. ("we", "us", "our"), the operator of the MDflow service available at mdflow.cz, together with the MDflow Web Clipper browser extension (collectively, the "Service"), collects, uses and stores information about you ("you", "user") when you use the Service.

By using the Service you confirm that you have read and understood this Policy.

1. Who is the data controller

The data controller is:

DataOps, s.r.o. Registered in the Czech Republic. Contact: vaclav@wearedataops.cz

2. What data we collect

We only collect the data needed to operate the Service.

From your Google account (via Google OAuth):

Personal access tokens:

Instead of signing in through Google, clients such as the Web Clipper extension authenticate with a personal access token that you generate in the Service and paste into that client. We store only a cryptographic hash of the token, never the token itself, and you can revoke a token at any time.

Content you create:

Content you clip with the Web Clipper extension:

When you clip a page, the extension sends the following to your MDflow workspace:

Exactly which fields are saved is controlled by your clipping template, which you can edit. The extension only transmits pages you explicitly choose to clip — it does not observe, record or transmit your browsing.

The extension does not use analytics, advertising or tracking of any kind. Your extension settings, clipping templates, saved highlights and local clip history are stored in your browser's own extension storage and are never sent to us. If you have your browser's built-in sync feature turned on, your browser may sync your extension settings and templates — including the personal access token you pasted in — across the devices where you are signed in to that browser. That syncing is performed by your browser vendor under their own privacy policy, not by us.

Technical data automatically collected by our hosting providers:

Analytics (only with your consent):

3. Why we collect it

We use your data only to:

We do not sell your data. We do not use your documents to train machine-learning models. We do not show you ads.

4. Legal basis

We process your data on the basis of:

5. Where your data lives

The Service runs on third-party infrastructure:

These providers may process your data outside the European Economic Area. They are bound by their own privacy terms and standard contractual clauses.

Optional AI features in the Web Clipper extension

The extension includes an optional Interpreter feature that is disabled by default. If you enable it, you choose an AI provider and configure it with your own credentials — for most providers this is an API key you obtain from them directly, while some options, such as a model running locally on your own machine, need no key at all. Page content is then sent from your browser directly to the provider you configured, so that it can process the page as you clip it. This data does not pass through our servers and we do not receive it. Your use of that provider is governed by their own terms and privacy policy. If you do not enable this feature, no data is sent to any AI provider.

Custom MDflow servers

By default the extension saves your clips to mdflow.cz, but you can point it at a different server address in its settings. If you do, your clips are sent to that server instead, and this Policy does not govern what that server does with them.

6. Public sharing

When you toggle public sharing on for a document, the document title and body become accessible to anyone who has the share URL. The URL contains a cryptographically random 64-character slug. We never publish the URL ourselves — it is up to you who you share it with.

The public viewer never reveals the document owner's email, name, avatar or any other documents in their workspace. When commenting is enabled, signed-in users with the share link can see comments together with each comment author's display name and avatar. Email addresses are not shown.

When you toggle sharing off, the slug is invalidated and the previous URL stops working.

Any signed-in user with an active share link can open an independent private copy of the shared document in their own workspace. The copy is not linked to the original after it is created.

7. Cookies

This section describes the mdflow.cz web app. We use cookies strictly necessary to keep you signed in. We also use Google Analytics cookies, but only after you accept them in the cookie banner — if you decline, no analytics cookies are set. We do not use advertising or marketing cookies.

The Web Clipper extension sets no cookies and uses no analytics identifiers.

8. How long we keep your data

We keep your account and content for as long as your account exists. If you ask us to delete your account, we delete your folders, documents and profile from our database. Backups may retain copies for a limited period before being overwritten.

Server access logs are kept for a short, technically necessary period.

9. Your rights

Under the GDPR you have the right to:

To exercise any of these rights, email us at vaclav@wearedataops.cz.

10. Children

The Service is not intended for users under 16. We do not knowingly collect data from children.

11. Changes to this Policy

We may update this Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be announced inside the Service before they take effect.

12. Contact

Questions about this Policy: vaclav@wearedataops.cz

← Back to sign in