Privacy Policy

Last updated: August 2026

This document is provided for general information and does not constitute legal advice. Please consult a qualified professional for advice specific to your situation.

Introduction

This Privacy Policy explains how Notioff ("Notioff," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit our website, create an account, or use our all-in-one workspace for notes, documents, wikis, databases, and projects (the "Service"). We are committed to handling your information responsibly and being clear about what we do.

By using the Service, you agree to the practices described in this policy. If you do not agree with this policy, please do not use the Service. This policy works alongside our Terms of Service and our Cookie Policy.

Information we collect

We collect information in a few different ways: information you provide directly, information created as you use the Service, and information collected automatically through standard web technologies.

  • Account information. When you register, we collect details such as your name, email address, and password. If you join a team workspace, we may also process your role and workspace membership.
  • Content you create. We store the notes, documents, databases, comments, files, and other content you and your collaborators create in the Service so that we can provide it back to you and keep it available across your devices.
  • Payment information. When you purchase a paid plan, payments are handled by third-party payment processors. We do not store full payment card numbers on our systems; we receive limited details such as a billing contact, the last four digits of a card, and transaction status.
  • Usage and technical data. We collect information about how you interact with the Service, such as pages viewed, features used, approximate location derived from your IP address, device and browser type, and log data that helps us diagnose problems and improve performance.
  • Cookies and similar technologies. We use cookies and similar technologies to operate the site, remember your preferences, and, with your consent, to measure and improve the Service. See our Cookie Policy for details.

How we use information

We use the information we collect for the following purposes:

  • To provide, maintain, and operate the Service, including storing and displaying your content.
  • To create and manage your account and authenticate you when you log in.
  • To process payments, manage subscriptions, and send billing-related messages.
  • To respond to your requests, provide customer support, and communicate service-related notices.
  • To understand how the Service is used so we can fix issues, improve features, and develop new ones.
  • To protect the security and integrity of the Service, prevent fraud and abuse, and enforce our terms.
  • To comply with legal obligations and respond to lawful requests.

Where data protection laws such as the EU and UK General Data Protection Regulation apply, we rely on the following legal bases to process your personal information:

  • Contract. Processing that is necessary to provide the Service you have requested and to fulfil our agreement with you.
  • Legitimate interests. Processing that supports our legitimate interests, such as securing the Service, understanding usage, and improving our product, provided those interests are not overridden by your rights.
  • Consent. Processing based on your consent, such as optional analytics cookies. You can withdraw consent at any time.
  • Legal obligation. Processing necessary to comply with applicable laws and regulations.

Cookies and analytics

We use strictly necessary cookies to make the site work and, only with your consent, optional analytics cookies that help us understand aggregate usage and improve the Service. We do not use cookies for cross-context behavioral advertising. You can accept all cookies or reject optional ones using our cookie banner, and you can change your choice at any time. For a full description of the cookies we use and how to manage them, please read our Cookie Policy.

How we share information

We do not sell your personal information. We share information only in the limited circumstances described below.

  • Service providers. We share information with vetted vendors who help us run the Service, such as cloud hosting, payment processing, analytics, and customer support providers. These providers act on our instructions under contracts that require appropriate safeguards.
  • Within your workspace. Content you create in a shared workspace is visible to other members and guests according to the sharing settings you choose.
  • Legal and safety. We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers. If Notioff is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to the commitments in this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

International data transfers

We are based in the United States, and the information we process may be stored and handled in the United States or in other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your location. Where we transfer personal information across borders, we use appropriate safeguards, such as standard contractual clauses or other lawful transfer mechanisms, to help protect your information.

Data retention

We keep personal information for as long as your account is active or as needed to provide the Service. We also retain information where necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete it or de-identify it. If you delete content or close your account, we remove the associated data within a reasonable period, subject to backup rotation and legal requirements.

Security

We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, and regular backups. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to safeguard your information. You can learn more on our Security page.

Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Access. Request a copy of the personal information we hold about you.
  • Correction. Ask us to correct information that is inaccurate or incomplete.
  • Deletion. Ask us to delete your personal information, subject to certain exceptions.
  • Portability. Request a copy of certain information in a portable, machine-readable format.
  • Objection and restriction. Object to or ask us to restrict certain processing.

You can update much of your account information directly in your settings. To exercise other rights, contact us using the details below. We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights.

Rights for EEA and UK residents

If you are located in the European Economic Area or the United Kingdom, you have rights under the GDPR, including the rights described above and the right to lodge a complaint with your local supervisory authority. We describe our data processing practices, safeguards, and how to reach our privacy team in more detail on our GDPR & Data Processing page.

Rights for California residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you the right to know what personal information we collect and how we use it, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of personal information.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, so there is no "sale" or "sharing" for you to opt out of. You may still exercise your other rights by contacting us using the details below, and we will not discriminate against you for doing so. You may use an authorized agent to submit a request on your behalf, and we may need to verify your identity before responding.

Children's privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. We encourage you to review this policy periodically.

Contact us

If you have questions about this Privacy Policy or how we handle your personal information, please contact us: