Privacy notice

Data we process

Account data. Your email address, the name you give, a password hash, account and verification dates, settings, permissions, storage use and the versions of the Terms and Privacy notice you accept, with the time. We do not keep your password in readable form.

Subscription data. Your subscription status, billing period, Paddle customer and subscription references, and payment events Paddle sends us. We do not receive your full card number. Paddle can collect billing details, tax information and payment method details at checkout.

Content. Your notes, folders, files, images, note history and Trash. The server stores and processes them for sync, search, export and published links. A published link lets anyone with its address read the selected content. We store a digest of the link token and its settings.

Use and security data. Stored byte counts, monthly response byte counts, sign-in sessions, network addresses and browser descriptions used in the device list, and temporary counts that limit abuse. A report of a published page includes its reason and any text the reader supplies. The report does not ask for the reader's identity.

Messages. Account verification, password reset, service and billing messages, account removal warnings, and the email address and content of support requests. Provider delivery records can contain message addresses and delivery status. Service and provider logs can contain request and error metadata. Do not put passwords or payment card details in support mail.

Purposes and legal grounds

We use data to supply your account, sync and store your content, apply your subscription and limits, send necessary messages, answer support requests, prevent abuse, and meet legal duties.

Where applicable law requires consent, we ask for it. You can withdraw it by writing to us. This does not affect lawful processing before withdrawal. If we cannot supply a feature without the required data, withdrawal can end that feature or require account removal. Where the law permits, we also process data to perform our agreement, protect the service and our users, and meet legal obligations. The legal ground depends on the law that applies.

We do not sell your personal data or use it for advertising. The site uses no analytics script and sets no cookie of its own. The application does not load advertising or analytics trackers.

Service providers and locations

• Railway hosts the application, billing service and PostgreSQL databases. Our infrastructure declares its EU West region in Amsterdam.
• Cloudflare provides network protection and serves the site. Cloudflare R2 stores uploaded files and database dump backups. The bucket configuration requests Western Europe as a location hint. This is not a promise that all Cloudflare processing stays in that region.
• Resend sends service mail. Our sending domain uses its Ireland region. This setting controls email routing and sending, not all provider storage. Resend states that its service data is stored in the United States. See its data protection information.
• Proton Mail receives and stores support mail. See its privacy notice.
• Paddle handles purchases and payment support. We give it your account email address when we create your customer record.
• Infisical manages service credentials. It is not a store for your notes.
• Better Stack checks service availability and database backup heartbeats. The monitors use public health endpoints, not your note content.
• Have I Been Pwned checks new passwords against known leaked passwords. The server sends only a short prefix of a password digest, not your password or email address.

We operate from India. Our providers and their subprocessors can process personal data in other countries. Network traffic and email can pass through other countries. Our declared regions do not cover every provider operation.

We use secure connections and restrict service credentials and access. Where a transfer requires a legal safeguard, that safeguard must apply to the transfer. Contact us for information about the providers and safeguards that apply to your data. We do not promise that a particular transfer contract or data residency guarantee applies to every provider. Resend states that its data processing agreement includes EU Standard Contractual Clauses for transfers, with a UK Addendum where applicable. Other provider transfer terms and their application to your data need to be checked separately.

We can also disclose data when the law requires it, to protect rights and safety, or to service providers who need it to supply the service. People who receive content through a published link can keep their own copies.

Retention and account removal

• Active account data and content stay while needed to supply your account. Trash remains until you delete it. File cleanup can run after deletion.
• A new account without a subscription is removed 30 days after creation. After a subscription ends, a locked account is removed after 90 days. We send warnings 30 days and 7 days before removal. A new subscription before removal stops that removal.
• An unfinished signup expires after its verification period. The scheduled cleanup removes expired pending signups. It is not kept as an active account.
• Sessions end on sign-out or expiry. Temporary abuse counts expire after their applicable time window.
• Account removal deletes active core account data and notes. Stored file cleanup and backups take longer. An identifier and removal time can remain to preserve history and prevent an old event from restoring the account.
• Billing records are separate from the note account. Payment events, subscription records and related records can remain after account removal for accounting, tax, refunds, fraud prevention and dispute handling. They do not have an automatic deletion deadline in the billing service. Paddle retains its own records under its own policy and legal duties.
• We keep support mail while needed to answer the request, handle a dispute or meet a legal duty. We review it for deletion when those purposes end. There is no automatic support mailbox deletion schedule in the application.
• Service and provider logs stay for operation, security and fault analysis, subject to the provider's retention settings. We have not set one common deletion period across all providers. Write to us for the current settings that apply to a request about your data.
• A weekly database dump goes to a separate Cloudflare R2 bucket. We delete each copy after 35 days. The declared Railway database backup schedule is daily and weekly. Backup copies retain deleted data until the provider expires them. A restore must also account for later deletions.

We do not promise immediate removal from backups or a fixed deletion date for records with no automatic expiry. You can ask us about a record, its purpose and whether it can be deleted. We must keep records where the law requires this.

Cookies and local storage

The application uses a necessary sign-in cookie. The billing service uses its own necessary session cookie. Paddle checkout loads Paddle's script and can use cookies and local storage for checkout, payment and fraud prevention. Its privacy notice explains its use. The site itself sets no cookie.

Your browser also stores a local copy of notes for offline use. Account removal on the server does not guarantee removal of copies or exports on all devices. Use your browser or device controls to remove local data.

Your rights and complaints

You can export notes and files with Export all notes in Settings. Limits in the Fair Use Policy can pause an export. Contact us if you need help. You can change your name in Settings and remove your account there. Write to us for access to other personal data, correction, deletion, withdrawal of consent, or an objection or restriction where the law gives that right. We can ask for enough information to verify your request safely.

Send privacy complaints to our grievance contact at support@tidynotebook.com. We will review and respond to them. You can use any complaint right under applicable law. When the relevant provisions of India's Digital Personal Data Protection Act and Rules apply, you can use their grievance process and complain to the Data Protection Board of India after you first use our grievance process. Those provisions start in stages. This notice does not state that every provision is already in force. You can also contact the relevant privacy authority in your country where its law gives you that right.

Security and children

Notes are not encrypted from end to end. Authorised operators can access them when necessary to run or repair the service, handle a support request, or comply with a legal duty. No system can promise complete security.

The service is for people aged 18 or older. By accepting the Terms at signup, you confirm that you meet that requirement. If you believe that a child has given us personal data, contact us so we can investigate and remove data where required.

Changes to this notice

We update the version when this notice changes. The application asks you to accept the current Terms and Privacy versions before normal access continues. You can instead export your notes and remove your account.