Privacy Policy

Last updated: March 2026

1. Information We Collect

Brew Notes collects minimal information required to provide the service:

• Account data: Your email address, used for authentication.
• Notes and content: The notes, folders, tags, and attachments you create.
• Usage metadata: Timestamps, sync status, and session identifiers for functionality.

2. How We Use Your Data

• To provide, maintain, and improve the Brew Notes service.
• To sync your notes across devices when you are online.
• To process AI features (summarization, suggestions, tagging) when you opt in. Your content is sent to AI providers (OpenAI) for processing and is not stored by them beyond the request.
• To send transactional emails (sign-in links, password resets).

3. Data Storage

Your data is stored in a secure cloud database with strict access controls ensuring only you can access your own data. Attachments are stored in encrypted cloud storage. Local copies are cached in your browser for offline access.

4. AI Processing

When AI features are enabled in Settings, note content may be sent to third-party AI providers for processing. This includes:

• Auto-tagging and auto-linking suggestions
• Note summarization
• Semantic search via embeddings
• Audio transcription

AI processing can be disabled entirely in Settings > AI. When disabled, no content is sent to AI providers.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

• Infrastructure providers that host the service, under strict data processing agreements.
• AI providers when AI features are enabled by you.
• When required by law.

6. Data Retention and Deletion

Your data is retained as long as your account is active. You may delete your account at any time from Settings > Danger Zone. Account deletion permanently removes all your notes, folders, tags, attachments, settings, and authentication data. This action is irreversible.

7. Cookies

Brew Notes uses essential cookies for authentication session management. We do not use tracking cookies or third-party analytics cookies.

8. Security

We use industry-standard security measures: HTTPS encryption in transit, strict data isolation in the database, and secure token-based authentication. Local data is protected by your browser's built-in security boundaries.

9. Your Rights

You have the right to access, export, and delete your data at any time through the Settings page. Data export is available in JSON and ZIP formats.

10. Contact

For privacy-related questions, contact the Brew Notes administrator through the primary support channel provided with the service.