Privacy policy
Last updated 29 October 2026
In short
- MarkupReporter runs on your own servers. Your report data never reaches us, and the software doesn't phone home.
- We only hold what we need to sell licences and answer emails: mainly your name, email, company and order details.
- Payments go through Stripe. We never see your card details.
- No advertising, no tracking cookies, no analytics, and we never sell your data.
Who we are
MarkupReporter is run by Chad Wheeler, a sole trader in the United Kingdom trading as MarkupReporter. In this policy, “we”, “us” and “our” mean MarkupReporter.
For the personal data described here, we are the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. That means we decide how and why your data is used, and we're responsible for looking after it.
- Email: support@markupreporter.com
- Location: Bourne End, Buckinghamshire, United Kingdom. Postal address available on request.
The MarkupReporter software
MarkupReporter is self-hosted. It runs entirely inside your own .NET application, on servers you control. This matters for privacy:
- Your report data never reaches us. The JSON, SQL Server data, report templates and PDFs you design and render stay on your systems. We have no access to them.
- No telemetry or phone-home. The software doesn't send usage statistics, crash reports or any other data back to us.
- Licence keys are checked offline. Your key is verified on your own server using a cryptographic signature, without contacting us. A licence key contains the licensee name, the product name, the date it was issued and, for licences that expire, the expiry date. Anyone who has the key can read these details.
- Database connections stay local. SQL Server connection details used in the designer are held by your application and are never sent to us.
Because of this, you are the data controller for any personal data inside your own reports, and we don't act as your data processor.
MarkupReporter is distributed through NuGet.org, which is run by Microsoft. When you download the package, Microsoft processes data about that download under its own privacy statement.
What we collect and why
We only collect what we need to sell licences, support customers and run this website. Here's each type of data, what we use it for and our lawful basis under UK GDPR.
| Data | What we use it for | Lawful basis |
|---|---|---|
| Purchase details: name, email, company name, billing country, VAT number, order number, licence type | Issuing and managing your licence, providing updates and renewals, and keeping business records | Contract, and legal obligation for tax and accounting records |
| Licence details: the licensee name and licence key issued to you | Creating your key, reissuing a lost key, and checking a licence is genuine if there's a question about it | Contract |
| Emails you send us: your name, email address, the message, and anything you attach (such as screenshots, logs or sample reports). If you use Report a problem in the designer, the email it prepares also includes your MarkupReporter, .NET, operating system and browser versions, and your licence status, which can show your licensee name. You can read and edit the email before you send it. | Answering your question, fixing bugs and handling licensing and sales enquiries | Legitimate interests (helping you and improving the product), or contract for existing customers |
| Website technical data: IP address, browser type, the page requested and the time | Delivering the website, keeping it secure and preventing abuse | Legitimate interests (running a secure website) |
Please don't send us personal data from your own reports. If you need to share a sample report to show a problem, remove or replace any real personal data first.
We don't sell your data, use it for advertising, or make decisions about you by automated means alone.
Payments and Stripe
Purchases are handled by Stripe, our merchant of record. When you buy a licence, you're buying through Stripe: it takes your payment, handles VAT and sales tax, and issues your receipt and invoice.
Stripe collects your payment details directly. We never see or store your full card details. Stripe shares your order details with us (such as your name, email, company, country and what you bought) so we can provide your licence and support.
Stripe is responsible for the data it collects to process payments and meet its own legal duties, under its own privacy policy. Its checkout may use its own cookies.
Who we share data with
We use a small number of trusted service providers. Each only gets the data it needs to provide its service.
| Provider | What they do | Data involved |
|---|---|---|
| Stripe | Checkout, payments, tax, receipts and invoices | Purchase and payment details |
| Cloudflare | Hosting the website, DNS and security | Website technical data |
| Namecheap | Domain registration and our email (Private Email) | Emails you send us and our replies |
| Google Fonts | Supplying the typefaces used on this website | Your IP address and browser details when the fonts load |
We may also share data if the law requires it, for example with HMRC, or to protect our legal rights. If MarkupReporter is ever sold or transferred, customer records would pass to the new owner, who would have to keep protecting them in line with this policy.
International transfers
Some of our providers store or process data outside the UK, including in the United States. When that happens, we rely on the safeguards UK law allows, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework), or the International Data Transfer Agreement and standard contractual clauses that providers include in their terms.
Cookies
This website doesn't use advertising or tracking cookies, and doesn't run any analytics.
Cloudflare may set a strictly necessary security cookie to protect the site from bots and attacks. Strictly necessary cookies don't need your consent. If you go to checkout, Stripe's checkout pages may set their own cookies, which are covered by Stripe's privacy policy.
If we ever add analytics or other non-essential cookies, we'll update this policy first and ask for your consent where the law requires it.
How long we keep data
- Purchase and licence records: for as long as your licence is active, then for at least 5 years after the 31 January tax return deadline for the year of the sale, as HMRC requires. We may keep a minimal record of issued licences for longer so we can confirm a licence is genuine.
- Support and sales emails: up to 2 years after our last conversation, then deleted, unless they form part of a purchase record.
- Attachments you send to support: deleted once your issue is resolved.
- Website technical data: kept by Cloudflare only for the short periods set out in its own policy.
Keeping data secure
We protect your data with sensible measures for a small business: the website is served only over HTTPS, our accounts are protected with strong passwords and two-factor authentication where available, and we keep the data we hold to a minimum. Payment card data is handled entirely by Stripe.
If a data breach affecting you is likely to put your rights at risk, we'll tell you and report it to the Information Commissioner's Office (ICO) as the law requires.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you and get a copy of it
- Correct data that's wrong or incomplete
- Delete your data, unless we have to keep it, for example for tax records
- Restrict how we use your data in certain cases
- Object to us using your data based on our legitimate interests
- Move data you gave us to another service, in a common machine-readable format
- Withdraw consent at any time, where we rely on consent
To use any of these rights, email support@markupreporter.com with “Privacy request” in the subject. It's free, and we'll reply within one month. We may ask you to confirm your identity first, usually by replying from the email address we have on file.
For anything about your payment, you can also contact Stripe directly.
Complaints
If you're unhappy with how we've handled your data, please contact us first so we can try to put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, on 0303 123 1113.
Children
MarkupReporter is a business product for software developers. It isn't aimed at children, and we don't knowingly collect data from anyone under 18.
Changes to this policy
We'll update this policy when our services or the law change. The date at the top shows when it was last updated. If we make a significant change, such as using a new type of data, we'll make that clear on this page, and we'll email customers where appropriate.