Privacy Policy

Last updated: March 27, 2026

NotesCodex ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect, why, how we use it, and your rights under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

1. Data We Collect

1.1 Purchase Data

When you purchase the Software, we collect your email address to deliver your download link and for support purposes. Payment processing is handled entirely by Stripe and/or PayPal - we never receive, store, or have access to your credit card number, CVV, or banking details.

1.2 Website Analytics

We use Google Analytics 4 (GA4) and Vercel Analytics to collect website usage data (page views, traffic sources, performance metrics). GA4 uses cookies and is loaded only after you give explicit consentvia the cookie banner. If you reject cookies, GA4 is never loaded. Vercel Analytics is cookieless and collects only anonymous, aggregated data. No data is shared with third parties for advertising. We use Google Consent Mode v2: analytics storage defaults to "denied" and is only set to "granted" after your explicit acceptance.

1.3 Application Data

The NotesCodex application stores all data locally on your device. Your notes, terminal sessions, files, and knowledge graph never leave your machine. We have no access to this data. The application does not contain telemetry, tracking, or analytics of any kind. If you enable optional cloud sync, you configure your own infrastructure - we do not process or access your synced data.

1.4 Update Checks

The application may periodically contact our server to check for updates. This request contains only your current application version and operating system. No personal data or content is transmitted.

2. How We Use Your Data

We use the data we collect solely for these purposes:

We do not use your data for marketing, advertising, profiling, or any purpose other than those listed above. We do not sell your data to third parties.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), our legal bases for processing personal data are:

4. Third-Party Processors

We share your data only with the following processors, solely for the purposes described:

All processors are bound by data processing agreements and comply with applicable data protection regulations.

5. Data Retention

We retain your purchase record (email address, payment reference, purchase date) for as long as necessary to provide you with updates and support, and to comply with legal obligations (e.g., tax and accounting requirements). You may request deletion at any time (see Section 7).

6. International Transfers

Our processors may store data outside the EEA (primarily in the United States). Where applicable, these transfers are protected by Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.

7. Your Rights

GDPR Rights (EEA Users)

Under the GDPR, you have the right to:

CCPA Rights (California Users)

Under the CCPA, California residents have the right to:

To exercise any of these rights, contact us at info@notescodex.com. We will respond within 30 days.

8. Cookies

We use the following cookies:

We do not use cookies for advertising, retargeting, or profiling.

9. Children

The Software is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email. The "Last updated" date at the top reflects the most recent revision.

11. Data Controller

The data controller for your personal data is NotesCodex. For any privacy-related inquiries, contact us at: info@notescodex.com