Privacy Policy

Who we are

Noted (“Noted”, “we”, “us”) is run by Matt Healey, operating as Noted. Noted helps you document problems with companies and turn that record into complaints and disputes you can file. Questions about this policy go to hello@staynoted.app.

What we collect

Your account. Your name, email address, and profile image, handled by our sign-in provider. We also store the US state you tell us you are in, so filings cite the right rules.

What you put in Noted. The issues you track and the companies they involve; timeline entries, notes, and call logs; the screenshots, photos, receipts, letters, PDFs, and phone or text records you upload; emails you forward to your Noted address; amounts, purchases, and commitments a company made to you; and the complaints and letters you generate. This often includes personal details about you, and names of company staff you dealt with.

Connected accounts. If you choose to connect an email account where we offer it, we store its access token encrypted and read only the messages needed to build your timeline. You can disconnect it in Settings.

Usage and diagnostics. Pages viewed, features used, device and browser type, and error reports, so we can see what works and fix what breaks. Our analytics and error tools are configured to mask the text and form inputs on your pages, so your evidence is not captured in them.

How we use it

• To run Noted: store your record, build your timeline, and generate the documents you ask for.
• To read evidence you add, such as pulling dates, amounts, and commitments out of a screenshot.
• To keep the service secure and prevent abuse, including limits on automated use.
• To understand which features help people and to fix problems.
• To contact you about your account or important changes to Noted.

We do not sell your personal information, share it for advertising, or let anyone use your content to train AI models.

AI processing

Some features send content to an AI provider to do the work you asked for: reading a screenshot or photo, and drafting a complaint or letter from your timeline. We send only what that feature needs. Today these providers are Anthropic and Google (Gemini API). We use them through paid business APIs whose terms do not allow them to use your content to train their models.

AI output can be wrong. Noted shows you what it extracted or drafted so you can check and edit it before anything is used.

Who processes your data for us

We use these service providers to run Noted. Each handles your data only to provide its service to us.

• Clerk: sign-in and account management
• Vercel: hosting the website and app
• Neon: our database
• Supabase: storage for the files you upload
• Forward Email: receiving emails you forward to your Noted address
• Anthropic and Google: AI processing, as described above
• PostHog: product analytics
• Sentry: error reporting

We may also disclose information if the law requires it, to protect someone’s safety, or as part of a sale or reorganisation of Noted, in which case this policy continues to apply to your data.

What is public

Your issues, evidence, and documents are private to your account. Noted publishes company pages that may show totals across all users, such as how many issues have been tracked with a company. These never include your name, your evidence, or anything that identifies you. Companies you add yourself that are not in our directory stay private to you.

Keeping, exporting, and deleting your data

We keep your data while your account is open. In Settings you can:

• Download a copy of your data at any time.
• Delete your account. This permanently removes your issues, timeline, documents, and uploaded files from Noted, and closes your sign-in account. Copies in our providers’ backups are overwritten within 30 days.

Deleting your Noted account does not delete anything you already sent elsewhere, such as a complaint you filed with a regulator, and does not affect your accounts with other services.

Security

Data is encrypted in transit. Connected-account tokens are encrypted at rest. Uploaded files are stored privately and only served to the account that owns them. No system is perfectly secure; if we learn of a breach affecting your data, we will tell you as the law requires.

Your choices and rights

You can view, correct, download, or delete your data in the app, or email us to do it for you. California residents have the right to know what personal information we collect and how it is used, to request deletion, to correct it, and not to be discriminated against for exercising these rights. We do not sell or share personal information as California law defines those terms. We do not respond to browser “Do Not Track” signals, and we do not track you across other websites.

Children

Noted is for adults 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has an account, email us and we will delete it.

Changes

If we change this policy in a way that matters, we will update the date above and tell you in the app or by email before the change takes effect.

Contact

Matt Healey, operating as Noted. Email hello@staynoted.app.