Privacy Policy

Notesa is the data controller for personal data collected through the Service. Contact: [email protected]

• •Account data: Email address (via Google OAuth or Magic Link)
• •Notes content: The text you type in the editor, stored as structured JSON
• •Usage data: Pages visited, features used, AI credits consumed (via PostHog)
• •Error data: Technical error reports for debugging (via Sentry)
• •Payment data: Subscription status and transaction history — we do not store credit card numbers

• •Provide and improve the note-taking service
• •Process AI formatting of your notes
• •Manage your subscription and credits
• •Send transactional emails (sign-in links)
• •Monitor and fix technical issues

When you trigger AI formatting, your note text is sent to Anthropic's Claude API. Before transmission, we automatically filter personally identifiable information (PII) including email addresses, phone numbers, and financial identifiers (IBANs, card numbers). These are replaced with anonymous tokens and restored after processing. Anthropic does not store your data beyond the API request.

Your data is retained as long as your account is active. When you delete your account, all associated data (notes, profiles, transactions) is permanently deleted. Backups are purged within 30 days.

If you are in the EU/EEA, you have the right to:

We use essential cookies for authentication (Supabase session) and analytics cookies (PostHog). You can disable analytics cookies by using a browser extension or ad blocker.

All data is encrypted in transit (TLS) and at rest. Row-Level Security ensures users can only access their own data. API keys are never exposed client-side (except the Supabase anonymous key).

We may update this policy. Significant changes will be communicated via email or in-app notification.

For privacy inquiries: [email protected]