Privacy Policy

Overview

This Privacy Policy explains how Notesier (“Notesier”, “we”, “us”) collects, uses, shares, and protects your information when you use our website, web app, desktop app, and related features (the “Service”). We’ve written it to be readable, not just legally complete.

By creating an account or using the Service, you agree to the practices described here. This policy works together with our Terms of Service.

Information we collect

Account information. Your email address, name, and — if you choose to provide them — your institution and field of study, plus your in-app preferences and settings.

Authentication data. A securely hashed password (if you use email sign-in), your Google account identifier (if you sign in with Google), email verification status, and hashed device identifiers used to recognise trusted devices.

Content you create or upload. Documents and their version history, assignment context, uploaded research papers and files, citations, comments, writing guidelines, and any AI “memory” notes saved to a document.

Usage and AI-interaction data. Records of AI requests and responses, token and feature usage, monthly quota consumption, and quality and writing statistics, which we use to operate features, enforce plan limits, and improve reliability.

Billing data. Your plan, subscription status, and payment identifiers from Stripe. Card details are handled by Stripe — we do not store full card numbers.

Sign-up attribution. Limited marketing attribution such as referral source, landing page, and UTM parameters, to understand how people discover Notesier.

Support data. Messages, tickets, and any attachments you send when you contact us.

Essential cookies. Cookies and similar technologies needed to keep you signed in and to remember sign-up attribution. We do not currently use third-party advertising or analytics trackers.

How we use your information

• To provide, maintain, and secure the Service and your account.
• To power AI and writing features you request (suggestions, rewrites, outlines, summaries, citations, grammar, transcription, and more).
• To process payments, manage subscriptions, and enforce plan limits.
• To detect, prevent, and respond to abuse, fraud, and security issues.
• To provide customer support and respond to your requests.
• To send service and account notices, and — only in line with your preferences — product updates and tips.
• To comply with legal obligations.

AI processing & sub-processors

To deliver features, we share the minimum necessary data with trusted service providers (“sub-processors”) who process it on our behalf:

• OpenAI — AI text generation, embeddings, and audio transcription. Relevant document or prompt content is sent to generate the output you request.
• LanguageTool — grammar and style checking.
• CrossRef, OpenAlex, and similar sources — citation lookup and research discovery.
• Stripe — payment processing.
• Google — optional sign-in.
• Cloudflare — file storage and infrastructure.
• Resend — transactional and support email.
• Sentry — optional error monitoring to keep the Service stable.

These providers process data under their own terms and security commitments. We do not sell your personal data, and we do not allow sub-processors to use Your Content to train their models for their own purposes.

How we share information

We share information only with the sub-processors above, where required by law or to respond to valid legal requests, to protect the rights and safety of users and the public, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you). We never sell your personal data.

Data retention

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account, we remove your account and associated content from our active systems; residual copies may persist briefly in backups before being overwritten, and we may retain limited records where required for legal, tax, or fraud-prevention purposes.

How we protect your data

We use industry-standard safeguards including encryption in transit, hashed passwords, access controls, and reputable infrastructure providers. No online service can be guaranteed perfectly secure, but we continually improve our controls and monitoring. Please help by keeping your password and one-time codes private.

Your rights & choices

Depending on where you live, you may have the right to:

• Access and correct your account information from your account settings.
• Delete your account and associated content from your account settings (you may need your password to confirm).
• Request a copy of your personal data, or object to or restrict certain processing — contact us and we’ll help.
• Manage communications by updating your email preferences.

To make a request, email privacy@notesier.com or use the Help Center. We may need to verify your identity before acting on certain requests.

International data transfers

Notesier and our sub-processors may process your information in countries other than your own, including the United States (for example, via OpenAI and Stripe). Where required, we rely on appropriate safeguards for such transfers.

Children's privacy

Notesier is intended for students aged 16 and over. We do not knowingly collect personal data from children under this age. If you believe a child has provided us information, contact us and we will take appropriate steps to remove it.

Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, provide additional notice through the Service where appropriate.

Contact us

For privacy questions or requests, email privacy@notesier.com or contact us through the Help Center.