Data Security & Privacy

Privacy Policy

At NotepadAiPro, your privacy is our highest priority. Because your notes are a reflection of your thoughts, ideas, and work, we are committed to keeping them secure, private, and fully under your control.

1. Our Privacy Commitments

Unlike traditional note-taking applications that analyze your drafts to target advertisements or sell data, NotepadAiPro operates under clear privacy-first principles:

Complete Content Ownership: You retain full copyright and ownership of all content you input or generate (e.g., text, headlines, SEO keywords, transcripts). We do not claim any rights over your work.
No Data Mining: We do not scan, parse, or analyze your drafts to build advertising profiles or train public models. Your data is used exclusively to power the tools you trigger.
Local-First Control: Notes are stored in your local browser storage (IndexedDB) first, ensuring high performance, offline usability, and keeping data in your hands.

2. Information We Collect

We only process and collect the minimum amount of data required to provide a functional, secure, and synchronized writing experience:

User Accounts & Auth

When you sign up, we collect your name, email address, and a salted, cryptographically hashed password. This information is used for account verification, security, and session management.

Document Storage & Sync

For logged-in accounts, notes and saved documents are synchronized to our secure cloud database (Cloudflare D1) so you can access them across devices. Guest drafts are kept strictly inside your local browser.

Shared Notes & Public Links

If you choose to generate a public link to share a note or document, the note content is temporarily stored on our servers to render the shared page. Anyone with the URL will be able to read it.

AI Prompts & Media Files

Text inputs sent to AI tools, uploaded files (e.g., audio/video files for transcription, image assets for thumbnail generation) are processed to provide the requested AI output and deleted immediately after processing or according to specific transient caching rules.

Cookies & Storage

We use essential cookies to maintain secure login sessions. Local browser storage (IndexedDB, localStorage) is used to cache drafts and editor state locally. We do not use tracking or advertising cookies.

Anonymized Analytics

We may compile basic, anonymized metrics (e.g., page views, tool usage volume, error logs) to monitor system performance, fix bugs, and optimize application speed.

3. Version History & Note Retention

To maintain optimal server efficiency and protect your data from perpetual storage, we apply clear retention rules:

Active Documents: Synced documents are retained on our servers as long as your account remains active.
3-Day Version History: Snapshots of note edits are preserved for up to 3 days to allow version restoration. Snapshots older than 3 days are permanently purged from both local IndexedDB and server databases.
Immediate Deletion: If you delete a note or document, it is immediately removed from your active workspace, local cache, and cloud sync servers.

4. Security & Encryption

We safeguard your personal data and writing assets using industry-standard security protocols:

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using Secure Sockets Layer technology.
Salted Hashing: Passwords are cryptographically hashed using modern algorithms, ensuring they can never be read or retrieved in plain text by anyone.
Cloud Infrastructure: Our platform is hosted on secure cloud environments (Cloudflare Workers, D1 database, and R2 storage), benefiting from global DDoS protection and isolation standards.

5. GDPR Compliance & User Rights

If you reside in the European Economic Area (EEA) or are covered by general privacy frameworks (like GDPR), you hold specific statutory rights regarding your personal information:

Right of Access & Portability: You can download or export your saved documents at any time via the workspace tools.
Right to Rectification: You can update your account profile details, email address, or document content directly in your settings.
Right to Erasure (Account Deletion): You have the right to request permanent deletion of your account and all synced files from our servers. Please contact our support team to execute this.
Right to Restrict Processing: You can request that we restrict or cease the processing of your data by closing your account or disconnecting sync tools.

6. Third-Party AI & Infrastructure Providers

To deliver state-of-the-art AI workspace tools, we securely transmit prompts, text segments, and media files to third-party AI provider APIs (such as OpenAI, Anthropic, and Google Gemini).

These transmissions are conducted under enterprise API agreements that prohibit these providers from using your submitted data or prompts to train their models, and enforce strict confidentiality protocols.

7. Contact Information

If you have any questions about this Privacy Policy, your data rights, or how we protect your information, please contact us by visiting our Contact page or sending an inquiry through NotepadAiPro.com.

Back to Home