How we handle your data

Notexs collects only what is strictly necessary to operate the service.

Account data

Email address and password hash, collected at sign-up. Required to provide cloud sync and Pro features.

Synced content (Pro, opt-in)

Documents you choose to sync are stored encrypted on our infrastructure. Local-only documents are never transmitted.

Payment data

Processed by Stripe exclusively. We store only a Stripe customer ID and your subscription status — no card numbers or bank details.

Diagnostic data

Anonymised crash reports via Sentry. No note content is included. You can opt out in app settings.

If you are in the EEA or UK, our legal bases are:

• Contract performance: Delivering the service you signed up for.
• Legitimate interest: Diagnosing crashes and improving reliability. A balancing test has been conducted.
• Legal obligation: Retaining transaction records as required by applicable tax law.
• Consent: Optional product update emails — withdrawable at any time.

• —Authenticate your account and maintain your session
• —Sync documents across devices when cloud sync is enabled
• —Process and manage your subscription or one-time payment
• —Send transactional emails (purchase confirmation, password reset)
• —Diagnose and fix software defects
• —Comply with legal obligations (tax records, fraud prevention)

Each sub-processor is bound by a Data Processing Agreement.

International transfers to the US are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.

Depending on your jurisdiction, you have the right to:

Email support@notexs.com to exercise any right. We respond within 30 days (GDPR Article 12).

Notexs is a native desktop app. This website uses strictly necessary local storage and optional privacy-friendly analytics:

• —Authentication session token (Supabase) — expires on sign-out
• —Theme preference (light/dark) — stored in your browser's localStorage only
• —Analytics preference — stored locally so we can remember your choice
• —Plausible Analytics — enabled only if you accept analytics, used to understand aggregate landing page traffic

No advertising cookies, retargeting pixels, session replay, heatmaps, or cross-site tracking. Analytics are used only on the marketing website, not inside the Notexs desktop workspace.

Notexs is not directed at children under 16 (or 13 in the United States). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact support@notexs.com and we will delete it promptly.

Material changes will be communicated by email to registered users at least 14 days before they take effect. Continued use after the effective date constitutes acceptance. If you are in the EEA, you also have the right to lodge a complaint with your local supervisory authority.