Privacy Policy

Information We Collect

Account Information

When you create an account, we collect your email address and password. Your password is securely hashed and we never store it in plain text. If you choose to sign in with a third-party provider (such as Google), we receive basic profile information from that provider.

Source and Study Data

When you create notes from links, uploads, recordings, documents, or pasted text, we store:

• Source URLs, uploaded file metadata, and text you submit
• Media or document metadata such as title, author, duration, and thumbnail
• Transcripts, extracted text, OCR output, or converted markdown
• AI-generated summaries, key insights, suggested questions, and study artifacts
• Your notes, annotations, and chat conversations related to those sources
• Sharing settings for any note you intentionally publish

Usage Information

We collect information about how you interact with our service, including:

• Rate limit and usage tracking for fair service distribution
• Timestamps of when you create or update notes and sources
• Your subscription status and billing information (processed by Creem)

Cookies and Session Data

We use cookies and similar technologies to maintain your authenticated session, remember your preferences, and improve your experience. You can control cookie settings through your browser, but some features may not function properly if cookies are disabled.

How We Use Your Information

We use the information we collect to:

• Provide and improve our note generation and study tools
• Generate AI-powered summaries, artifacts, and insights using your submitted sources
• Maintain your account and authenticate your access
• Process payments and manage subscriptions
• Enforce rate limits and prevent abuse of our service
• Send important service updates and notifications about your account
• Respond to your questions and support requests
• Analyze usage patterns to improve our features and user experience

Third-Party Services

We use trusted third-party services to provide and enhance our service. Your data may be processed by:

Cloudflare

We use Cloudflare D1 for database storage and Cloudflare Workers for hosting our application. Cloudflare provides secure infrastructure with encryption at rest and in transit. Learn more at Cloudflare's Privacy Policy.

OpenRouter and Google Gemini

We use OpenRouter and Google Gemini AI models to generate summaries, study artifacts, and chat responses. Your submitted source content and questions may be sent to those services for processing. Google's AI services are subject to their Privacy Policy.

Supadata

We use Supadata's API to fetch YouTube video transcripts. When you analyze a video, we send the video ID to Supadata to retrieve the transcript data.

Creem

Payments, taxes, receipts, subscription billing, refunds, and chargebacks are handled by Creem as our Merchant of Record. We do not store your full credit card information. Creem collects and processes your payment details according to their Privacy Notice.

Data Security

We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction:

• All data transmission uses HTTPS encryption (SSL/TLS)
• Passwords are hashed using industry-standard encryption
• Our database is hosted on secure servers with encryption at rest
• We implement rate limiting and abuse prevention measures
• Access to user data is restricted to essential operations only

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

You can access your notes, sources, and account information at any time through your Notesnip account. If you would like to export your data in a portable format, please contact us.

Correction and Deletion

You can edit or delete your notes and sources directly from your account. To delete your entire account and all associated data, please contact us at support@notesnip.com. We will process account deletion requests within 30 days.

Marketing Communications

We do not send marketing emails. We only send transactional emails related to your account and subscription. You cannot opt out of essential service communications.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to request disclosure of information we collect and share, and the right to request deletion of your information. We do not sell your personal information.

European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and data portability. Our legal basis for processing your data is your consent and our legitimate interest in providing the service.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required by law to retain certain information (such as for tax or legal compliance).

Video analyses that were created while not signed in may be retained for caching purposes but are not linked to your identity.

Children's Privacy

Notesnip is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using Notesnip, you consent to the transfer of your information to our facilities and third-party service providers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. If we make material changes, we will notify you via email or through a notice on our website. The “Last updated” date at the top of this policy indicates when it was last revised.

Your continued use of Notesnip after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

support@notesnip.com

We will respond to privacy-related inquiries within 30 days. For urgent security concerns, please indicate that in your email subject line.