Privacy Policy

Last Updated: January 8, 2026

Introduction

Welcome to Noted. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our AI-powered note-taking and workspace application.

Information We Collect

Account Information

  • Email address
  • Name
  • Profile picture (optional)
  • Authentication credentials (managed securely by Clerk)

Content and Files

  • Documents, notes, and content you create
  • Files and images you upload
  • AI-generated content and interactions
  • Document metadata (creation date, modification history)

Usage Information

  • Device information and browser type
  • IP address and location data
  • Usage patterns and feature interactions
  • Error logs and diagnostic data

AI Provider Information

  • API keys you provide for AI services (OpenAI, Anthropic, Google)
  • AI model preferences and settings
  • Prompts and AI-generated responses

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our services
  • Process and store your documents and files
  • Enable AI features using your provided API keys
  • Authenticate and secure your account
  • Send important service notifications
  • Analyze usage patterns to enhance user experience
  • Prevent fraud and ensure platform security
  • Comply with legal obligations

Data Storage and Security

Your data is stored securely using:

  • Convex: For database and real-time data synchronization
  • EdgeStore: For secure file storage
  • Clerk: For authentication and user management

We implement industry-standard security measures including encryption in transit and at rest, regular security audits, and access controls to protect your data from unauthorized access, disclosure, or destruction.

AI Services and Third-Party Providers

When you use AI features with your own API keys:

  • Your content is sent to the AI provider you selected (OpenAI, Anthropic, or Google)
  • API keys are encrypted and stored securely
  • We do not access or store your API keys in plain text
  • AI providers may process your data according to their own privacy policies
  • You are responsible for reviewing and accepting each AI provider's terms

We recommend reviewing the privacy policies of:

Data Sharing

We do not sell your personal data. We may share your information only in the following circumstances:

  • With your consent: When you explicitly authorize us to share information
  • Service providers: With trusted third-party services that help us operate (Convex, EdgeStore, Clerk)
  • Legal requirements: When required by law or to protect our legal rights
  • Business transfers: In connection with a merger, acquisition, or sale of assets

Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Export: Download your documents and files
  • Portability: Transfer your data to another service
  • Opt-out: Decline certain data processing activities

To exercise these rights, please contact us through the settings page or email us directly.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Cookies and Tracking

We use cookies and similar technologies to:

  • Maintain your session and authentication state
  • Remember your preferences and settings
  • Analyze usage patterns and improve performance

You can control cookies through your browser settings, but disabling them may affect functionality.

Children's Privacy

Noted is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable data protection laws.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of Noted after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us at: