Privacy Policy

Effective date: 5th May 2026  ·  Governed by the Privacy Act 1988 (Cth) & Australian Privacy Principles

At JotNotes (getjotnotes.com), your privacy matters. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. JotNotes is operated from Australia and is subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

We collect only what is necessary to provide the service (APP 3):

• Account information: Your first name, email address, and encrypted password when you sign up for a Standard account.
• Note content: Text you submit for cleaning is sent to the Anthropic API for processing. JotNotes does not permanently store the content of your notes.
• Usage data: Number of cleans used, subscription status, and general interaction patterns with the website.
• Payment data: Subscription transactions are handled entirely by Lemon Squeezy. We never see or store your card details.
• Technical data: IP address and browser type, collected automatically for security and reliability purposes.
• Local storage: Your browser may store notes, your email, and your usage count locally on your device for convenience. This data does not leave your device unless you submit it to us.

2. How We Use Your Information

We use your personal information only for the purpose it was collected, or a directly related purpose (APP 6):

• To create and manage your JotNotes account.
• To process your notes through the Anthropic API and return the cleaned result to you.
• To enforce usage limits and manage your Standard subscription.
• To process payments via Lemon Squeezy.
• To send transactional emails — account confirmation, password resets, and important service notices. We do not send marketing emails unless you opt in.
• To detect and address security issues or misuse.
• To improve JotNotes using aggregated, anonymised usage patterns.

We will never use your note content to train AI models, sell it, or share it for any purpose beyond processing your request.

3. Disclosure to Third Parties

We do not sell your personal information. We share data with the following providers only to the extent necessary to operate JotNotes (APP 6):

• Anthropic API: Processes your submitted note text for AI cleaning.
• Supabase: Stores your account credentials and authentication data securely (SOC 2 compliant).
• Lemon Squeezy: Handles all subscription payments and billing.
• Hosting (Render, Netlify, or Vercel): Serves the JotNotes front-end and back-end. Standard server logs may include IP addresses.

We may also disclose your information where required by Australian law — for example, to comply with a court order or a lawful request from a government authority.

4. Overseas Disclosure

Some of our service providers are based outside Australia, including in the United States (Anthropic, Supabase, Lemon Squeezy, and our hosting providers). By using JotNotes, you consent to your personal information being transferred to and processed in these countries (APP 8).

We take reasonable steps to ensure overseas recipients handle your data consistently with the Australian Privacy Principles. Where possible, we rely on providers certified under recognised data protection frameworks such as SOC 2.

5. Cookies & Local Storage

JotNotes uses browser local storage (not third-party tracking cookies) to:

• Track the number of free cleans used on your device.
• Temporarily store your notes and email between sessions for convenience.
• Maintain your login session via Supabase authentication tokens.

We do not use advertising cookies or cross-site tracking. You can clear local storage at any time through your browser settings — this will reset your free clean count and remove any locally saved notes.

6. Data Security

We implement reasonable technical and organisational measures to protect your personal information from misuse, loss, and unauthorised access or disclosure (APP 11):

• Passwords are hashed and stored securely by Supabase — we never see your plain-text password.
• All data transmitted between your browser and JotNotes is encrypted via HTTPS/TLS.
• API keys and secrets are stored server-side and never exposed to the client.

No method of internet transmission is 100% secure. If you become aware of a security issue, please contact us immediately at support@getjotnotes.com.

7. Data Retention

We retain personal information only as long as necessary to fulfil the purpose it was collected for (APP 11.2):

• Account data is kept while your account is active. We will delete it within 30 days of a deletion request.
• Note content is not stored by JotNotes after processing. Anthropic's own retention policies apply to API calls — see Anthropic's Privacy Policy.
• Payment records are retained by Lemon Squeezy in line with their policies and applicable financial regulations.
• Server logs (including IP addresses) may be kept for up to 90 days for security purposes.

8. Your Rights (APP 12 & 13)

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you (APP 12).
• Correct any information that is inaccurate, outdated, or incomplete (APP 13).
• Request deletion of your account and associated personal data.
• Opt out of marketing communications at any time via the unsubscribe link in our emails.

To exercise any of these rights, email support@getjotnotes.com. We will respond within 30 days and may need to verify your identity before fulfilling a request.

9. Children's Privacy

JotNotes is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For material changes, we will notify you by email (if you have an account) or via a notice on the JotNotes website. Continued use of JotNotes after a policy update constitutes acceptance of the revised policy.

11. Complaints & Contact

If you have a complaint about how we have handled your personal information, please contact us first:

• Email: support@getjotnotes.com
• We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or by calling 1300 363 992.

Last updated: 5th May 2026