How your notes and decks
are handled at Makelfy.
Encryption in transit and at rest
All traffic to Makelfy is served over TLS 1.2 and higher. All documents, notes and generated decks are encrypted at rest using AES-256 in the storage layer.
What we store
We store the notes you paste, the decks that are generated from them, and the account you signed up with. Anything you have not typed, uploaded or generated is not on our systems.
Retention
Free-tier decks are retained for 30 days from last activity. Student and Pro decks are retained for the life of the account. You can delete any deck permanently in one click - it is removed from all storage within 24 hours.
Access scope
Only you can open your decks by default. Share links, when you generate them, are the sole mechanism for third-party access. No one at Makelfy opens a customer deck without a written support request from that customer.
Hosting and region
Application and storage layers run in ap-south (Mumbai) with a read replica in eu-west-1 for redundancy. No data is transferred to jurisdictions outside these regions.
Backups and recovery
Encrypted, point-in-time backups are taken every 6 hours and retained for 7 days. Recovery drills are run monthly against a synthetic account to keep the runbook honest.
Where we are today.Not where we would like to be quoted.
Overclaiming compliance is worse than under-claiming. This is our current posture, stated as it is.
Found something that looks off?
We treat responsible disclosure seriously. Use the general inquiries form on the Contact page and select "Security" as the topic - it routes straight to the person on call.