Privacy Notice

• We collect only what we need to run the Service.
• We don't sell your data, show ads or use advertising trackers.
• We use PostHog to understand how the app is used, without cookies and never with what you write or draw. You can turn it off in Settings → Privacy. Readers of published pages are never tracked.
• Your notes and canvases are private unless you share or publish them.
• Anything you publish to the web can be read by anyone, including search engines, and shows your name (and profile photo, if you have one) as its author.

Account information. Your email address, and the name and profile picture you choose or that Google provides if you sign in with Google. Sign-in is handled by our authentication provider, Supabase; we never see or store a password for Google sign-in, and email sign-in uses one-time links and codes.

Your content. The notes, canvases, projects and notebooks you create, including their titles, text, drawings and images, and the preview images we generate of your canvases.

Sharing information. Who you've shared something with and their role (Editor or Viewer), your link-sharing and publishing settings, and the public web address of anything you publish. When you invite someone by email who doesn't have an account yet, we store their email address so their access starts when they sign up, and we send them an invitation email on your behalf.

Preferences. Settings such as theme and reading font.

Activity records. A log of changes made to your workspace (for example, who created, edited, shared or deleted an item, and when), used for security and to help resolve problems.

Technical information. Our hosting providers keep standard server logs, such as IP address, browser or device type, the pages and endpoints requested, and times and errors, for security and debugging.

Views of published pages. When someone opens a page you've published, we add one to an hourly view count for that page, which you and your editors can see, and we count unique visitors per day. To tell visitors apart without cookies we combine a secret value that changes every day with the page and either the visitor's account (if they're signed in) or their IP address and browser type, and keep only a one-way hash of that, for that day only. The daily secret and all hashes are deleted when the day ends, so they can't be traced back to a person or linked across days. We never store the IP address or browser type, we skip known bots and link previews, and visits by a page's own owners and editors aren't counted.

Product analytics. To learn which features are used and where people get stuck, we use PostHog (hosted in the US). On our website we record anonymous page views and clicks on sign-up links. In the app we record page views, a few named steps (such as signing up, creating a note, publishing, sharing, upgrading or using a promo code) linked to your account id, and screen recordings of the app in which every piece of text and every input is hidden and your notes and canvases are left out entirely. We never send your name, email address, titles or content to PostHog, and we use no cookies or on-device storage for it: the data lives only in memory while the page is open. Published pages, and the people who read them, are never tracked. You can turn this off at any time in Settings → Privacy ("Help improve Octonote"), and browsers that send "Do Not Track" are not tracked.

We use this information to:

• provide the Service: save, sync and display your work on every device;
• share and publish your work the way you choose;
• send the emails the Service needs, such as sign-in codes and sharing invitations;
• keep the Service and your account secure and prevent abuse;
• fix problems and respond when you contact us.

We don't sell or rent your information, use it for advertising, or use your content to train AI models.

Private by default. New notes, canvases, projects and notebooks are visible only to you and members of your workspace.

People you share with. Anyone you add can view or edit the item, depending on the role you give them. Sharing a notebook or project also shares what's inside it, including items you add later.

Anyone with the link. If you turn this on, anyone who has the link can open the item without an account.

Published to the web. Published items are public pages. Anyone can read them, they may appear in search engines, link previews and archives, and copies made by others may remain after you unpublish. Items added to a published notebook or project are published too; the editor labels them so this is never a surprise. Don't publish anything you wouldn't want to be public. A published page shows its author's name and profile photo, and the date it was published.

Votes. Signed-in readers can upvote or downvote a published page. We store each vote with the account that cast it so it can be changed or removed; everyone sees only the totals.

We use a small number of providers to run the Service. They process data only on our instructions and only to provide their service to us:

• Supabase: database, sign-in and file storage (including canvas preview images).
• Vercel: hosting for the website and web app.
• Railway: hosting for our application server.
• Resend: sending sharing invitation emails.
• PostHog: product analytics, as described above (not on published pages, and off if you turn it off).
• Google: only if you choose to sign in with Google.
• Apple and Google app stores: to distribute the mobile apps, under their own privacy policies.

These providers may process data in the United States and other countries. We may also disclose information if required by law, or to protect the rights and safety of our users or the Service.

On the web we use only essential first-party cookies to keep you signed in, and your browser's local storage for preferences such as theme. The mobile apps store your sign-in session in your device's secure storage and remember on your device whether you've seen the introduction. We don't use advertising or analytics cookies: product analytics keeps its data in memory only, and published-page view counts work without any cookies.

We keep your account and content for as long as your account is open. When you delete a note or canvas it disappears from your workspace straight away; we may keep a copy for a limited time so mistakes can be recovered. When your account is deleted, we delete your account information and content, apart from anything we must keep to meet legal obligations, resolve disputes or prevent abuse. Server logs are kept for a short period by our hosting providers.

You can edit or delete your content and change your profile at any time in the app, and delete your whole account yourself in Settings → Delete account (on the web or in the mobile app). You can turn off product analytics in Settings → Privacy. You can also ask us to give you a copy of your information, correct it, delete your account and its data, or stop processing it. Depending on where you live (for example, in the EU, UK or California), you may have additional rights under local law, including the right to complain to a data-protection authority.

To make a request, email support@octonote.ai from the address on your account. We'll respond within 30 days.

Data is encrypted in transit, access to your content is checked on every request, and access to production systems is limited. No service is perfectly secure, so please use a strong, private email account and tell us straight away if you think your account has been compromised.

The Service isn't intended for children under 13 (or the minimum age in your country), and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.

We'll update the date above whenever this notice changes. For significant changes, such as new kinds of data or new uses of it, we'll tell you in the app or by email before they take effect.

Questions about privacy: support@octonote.ai.