Privacy Policy

Effective Date: 20 July 2026 Last Updated: 20 July 2026

Notonix ("we," "us," "our") operates the website notonix.me and the Notonix application (collectively, the "Service"). This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you have.

By using Notonix, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: name, email address, password (encrypted), and profile details you choose to add
• Content you create: notes, documents, and other content you generate or upload within Notonix
• Payment information: when you subscribe to a paid plan, payment is processed directly by Razorpay. Notonix does not collect or store your card, UPI, or bank details on our own servers — Razorpay handles this in compliance with PCI-DSS standards

1.2 Information Collected Automatically

• Usage data: pages visited, features used, session duration, and interaction patterns within the app
• Device and log data: IP address, browser type, operating system, and device identifiers
• Cookies and similar technologies: used to keep you logged in, remember preferences, and understand how the Service is used

2. Why We Collect This Information

We use the information we collect to:

• Create and maintain your account
• Provide and improve the core functionality of Notonix (notes, AI features, sync)
• Process payments and manage subscriptions (free vs. pro plans)
• Enforce usage quotas associated with your plan
• Send important service-related communications (billing, security alerts, updates)
• Detect, prevent, and address technical issues, fraud, or abuse
• Analyze usage trends to improve the product

We do not sell your personal information to third parties.

3. How We Share Information

We share information only in the following circumstances:

| Recipient | Purpose | |---|---| | Razorpay | Payment processing for subscriptions | | Supabase (database/infrastructure provider) | Secure storage of account and application data | | Vercel | Hosting and serving the web application frontend over HTTPS | | Microsoft Azure | Hosting the FastAPI backend container services | | Resend | Delivering transactional emails (sign-up welcome emails & invoice receipts) | | AI model providers (NVIDIA, OpenRouter, Google AI Studio) | Processing content you submit when you use AI-powered features, as necessary to generate that output | | Tavily (web search/research provider) | Performing real-time web searches when you use AI-powered research features | | Firecrawl (web content extraction provider) | Extracting and refreshing content from web URLs when you use Automatic Note Refresh | | Legal authorities | Only if required by law, court order, or to protect our legal rights |

3.1 Important Note on AI Processing

Notonix is currently built using free-tier access to certain AI model providers, including NVIDIA NIM, OpenRouter, and Google AI Studio. Under the terms of these free tiers:

• Some providers may use content submitted through their free-tier services to improve or train their own models, in accordance with their own privacy policies
• This applies only when you use AI-powered features (such as AI summaries, AI chat, or similar tools) — content you simply store as a note, without invoking an AI feature, is not sent to these providers
• We do not control how these third parties handle data once it is processed on their end; you can review their respective policies directly on their websites

We are working toward migrating to paid, no-training-guaranteed tiers with these providers as Notonix grows. We will update this policy and notify users when that migration is complete. If you have concerns about this, we recommend avoiding AI-powered features for highly sensitive or confidential notes until this migration is complete.

3.2 Web Search / Research Features (Tavily)

When you use AI-powered research or web-search features, your query is sent to Tavily to retrieve relevant results. Tavily maintains a zero data retention policy and does not use submitted queries to train models. In rare cases where Tavily's own search index cannot fulfil a query, it may forward that query to a third-party search index provider, governed by that provider's own privacy policy. Avoid including sensitive personal information directly in a research query if you wish to prevent this rare pass-through scenario.

All third-party processors are otherwise contractually required to handle your data securely and only for the purposes specified.

3.3 Web Content Refresh Features (Firecrawl)

When you use Automatic Note Refresh for a web-sourced note, the source URL is sent to Firecrawl so it can extract the current webpage content. Notonix uses the returned content to compare the webpage with your existing note and show you a non-destructive revision for review. Firecrawl may process and temporarily store URLs and extracted content according to its own policies and service configuration. Review Firecrawl's Privacy Policy for more information, and do not use Automatic Note Refresh with confidential or private URLs unless you are comfortable sharing them with this provider.

4. Data Security

We implement industry-standard security measures, including encrypted password storage, authorization checks on all backend endpoints, and secure token-based authentication, to protect your data against unauthorized access, alteration, or disclosure. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your account information and content for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required for legal, tax, or dispute-resolution purposes. Authorized personnel (including the founder/operator) may access user content when necessary for technical support, debugging, abuse investigation, or legal compliance. We do not access user content for any other purpose.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request that we correct inaccurate or incomplete data
• Deletion: request that we delete your personal data (subject to legal retention requirements)
• Data portability: request a structured, commonly used export of your content
• Withdrawal of consent: where processing is based on consent, you may withdraw your consent at any time

To exercise any of these rights, contact us at rohitrppatil9188@gmail.com.

7. International Data Transfers

Your information may be transferred to, stored, and processed in servers located outside your home country (including in the United States and other locations where our service providers operate). By using Notonix, you consent to the transfer of your information to facilities that may have different data protection laws than your home jurisdiction.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and notify you through the app or via email. Your continued use of Notonix after such changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us at:

• Operator: ROHIT RAJENDRA PATIL
• Email: rohitrppatil9188@gmail.com
• Website: https://notonix.me