Privacy Policy

Last updated: 22 July 2026

1. Who we are (data controller)

OttaNote is offered by Giant-Soft v.o.f., trading under the name projectproject.nl (KvK 01052442, VAT NL007367703B01, Emmakade 50, 8933 AT Leeuwarden). Contact for privacy questions: support@ottanote.com.

2. What data we process

We do not ask for a date of birth and do not collect location, contacts or device identifiers for profiling.

3. What we do not do

• No tracking, no advertising, no third-party analytics SDKs.
• We do not sell your data and we do not share it with third parties for marketing.
• Your note content is not read or used for other purposes.
• No external CDNs: we serve fonts and assets ourselves. When you use the app, no request or IP address is sent to Google Fonts or any other external network.

4. Processors / third parties

• Hosting/storage: our own, self-hosted server environment (Supabase: database, file storage, realtime), managed by Giant-Soft v.o.f.; data is held on a server in the European Union (EU/EEA).
• Email delivery: our own mail server for verification and password-reset emails.
• Login with Google (optional): if you choose this, we receive your email address and basic profile data from Google. Google acts as an independent party in this; see Google's privacy policy.
• Payment provider — Paddle (Merchant of Record): handles subscriptions, payment, invoicing and VAT. Paddle processes your payment details; OttaNote stores no card or payment details. For the purchase, Paddle acts as the seller and (joint) controller of those payment details.

5. Security

• All traffic via HTTPS/TLS (encrypted in transit).
• Row-level access control (RLS): you only see and edit your own (and notes shared with you) notes.
• Sensitive profile fields are stored encrypted (column encryption).
• Optional two-factor authentication (2FA) and app lock (PIN/biometrics).

5a. The vault (end-to-end / zero-knowledge)

• Notes in the vault are encrypted on your device with a key derived from your PIN code and recovery code (strengthened with a server-side secret against brute-force). We store only encrypted data and have no access to your PIN code, recovery code or the contents.
• As a result, we cannot view, disclose to third parties or recover vault contents. If you lose both your PIN code and recovery code, the contents are permanently inaccessible.

5b. AI connections (your own AI)

• If you connect your own AI assistant (via our MCP connection), you give it access to (a part you choose of) your notes. The AI provider you choose is a third party outside our control; that provider's privacy policy applies to that processing. We do not share anything on our own initiative; the connection is established at your initiative and is revocable.

5c. Investigation on a concrete indication of misuse

• Where there is a concrete indication of misuse, unlawful content or illegal use, we may investigate and, only insofar as strictly necessary and confidentially, sample notes and attachments — for example to establish or stop such content, report it to a competent authority, or comply with a legal obligation.
• Legal basis: our legitimate interest (protecting the service and other users and stopping misuse) and, where applicable, compliance with a legal obligation.
• Safeguards: this happens only on a concrete occasion, is proportionate and limited to the minimum, is done confidentially and is recorded; we do not use the content for any other purpose. The vault is excluded — it is end-to-end encrypted and technically inaccessible to us (see §5a). See also §8 of the terms.

6. International transfers

Your note data is held on our server in the EU. With Login with Google and with Paddle, limited processing may take place outside the EU; those parties apply appropriate safeguards for this (such as EU standard contractual clauses). We do not transfer more than is necessary for login and payment respectively.

7. Retention

• Account + notes: for as long as you have an account.
• Deleting your account (in-app): notes, attachments and account data are deleted immediately (including files in storage).
• Trash: deleted notes/folders remain recoverable for 30 days and are then deleted automatically and permanently, including attachments.
• Version history: we keep earlier versions for 30 days (free) or 1 year (Plus); after that they are cleaned up.
• Backups: daily, AES-256-encrypted backups, rotating over 14 days. Deleted data therefore disappears from the backups too within ~two weeks.
• Technical logs: 90 days, then deleted.

8. Your rights (GDPR (EU 2016/679))

You have the right to access, rectification, erasure, restriction, objection and data portability:

• Access/portability: create a backup in the app (a ZIP with all your notes and attachments) or export notes (PDF/Markdown/HTML).
• Erasure: "Delete account" in the app, or via support.
• Other requests: support@ottanote.com. You can also lodge a complaint with the data protection authority in your country (within the EU/EEA).

9. Cookies and local storage

OttaNote uses only functional local storage (session and preferences). No tracking cookies, so no consent banner is needed.

10. Changes

We may update this policy; the date at the top indicates the latest version. In the event of significant changes, we will inform you in the app or by email.