1. Who We Are
NotesJoy Inc. (“NotesJoy”, “we”, “our”, “us”) provides an intelligent, cloud-based note-taking service available on web, desktop, and mobile apps.
2. Information We Collect
| Category | Examples | Collected When |
|---|---|---|
| Account Data | name, email, hashed password, billing address | you create or manage account |
| Content | text, images, files, links, templates you add to NotesJoy | you use the service |
| Usage Data | device type, OS, IP address, pages visited, crash logs | you interact with app or site |
| Payment Data | cardholder name, last 4 digits, expiry date (via Stripe/PayPal) | you buy a subscription |
| Integrations | data imported from Evernote, OneNote, etc. | you connect third-party apps |
| Cookies etc. | session ID, preferences, analytics IDs | you visit our websites |
3. How We Use Your Information
- Provide, maintain, and secure the Service
- Sync your notes across devices
- Deliver AI-powered organization, search, and insights
- Process payments and manage subscriptions
- Send service emails and optional product updates
- Improve and debug products through aggregated analytics
4. Legal Bases (EEA/UK)
• Contract • Legitimate interests • Consent • Legal obligation
5. Sharing & Disclosure
We never sell your data. We share it only:
- with trusted processors bound by contract
- when you collaborate or share a note link
- to comply with law or protect rights/safety
- in a merger or acquisition (you will be notified)
6. AI Processing
AI runs on-device whenever possible; if cloud processing is required, data is encrypted in transit and anonymised. Models are not trained on your private notes unless you opt in.
7. Security
- End-to-end AES-256 encryption (in transit & at rest)
- Zero-knowledge keys—only you can decrypt your notes
- Regular penetration tests and SOC 2-aligned controls
8. Data Retention
Account data is kept while your account is active and for 30 days after deletion; backups purge automatically after 90 days.
9. Your Rights
Access, correct, export, or delete your data via Account Settings. Additional rights for EEA/UK/CA residents. Email [email protected] for help.
10. International Transfers
Servers are in the USA; Standard Contractual Clauses or equivalent safeguards cover transfers.
11. Children
Not directed to children under 13 (or local minimum). We do not knowingly collect their data.
12. Changes
We’ll post changes here and email you if they are material.