Legal
Privacy policy
Last updated:
This Privacy Policy describes how NoteClearly ("we", "us", "our") collects, uses, and protects your personal data when you visit our website or use our services ("Service"). We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Danish data protection law.
Data Controller
The data controller responsible for your personal data is:
Example Company ApS
CVR: 00000000
Example Street 1, 1000 Copenhagen, Denmark
Email: hello@noteclearly.com
Data We Collect
We may collect the following types of information:
- Personal data - your name, email address and billing information.
- Customer data - data you or your users input into the system as part of using the Service, stored and processed only to provide the Service and related services to you.
- Usage data - information about how you interact with the Service, such as log files, IP addresses, browser types, device information, and pages visited.
- Enquiries - the name, email address and message you send us through the contact form or waitlist on this website.
Controller and Processor Roles
For personal data about third parties that you or your users store in the Service, you are the data controller and we act as your data processor. That processing is governed by the Data Processing section of our Terms of Service. For account, billing, usage and enquiry data we are the data controller.
Legal Basis for Processing
- Performance of a contract (Art. 6(1)(b)) - account data and usage data are processed to deliver the service you have subscribed to.
- Legal obligation (Art. 6(1)(c)) - billing records are retained to comply with Danish bookkeeping law (bogføringsloven).
- Legitimate interest (Art. 6(1)(f)) - transactional emails (password reset, notifications), service-related communications, replies to your enquiries, and in-app support chat are based on our legitimate interest in operating and supporting the service.
Data Processors and Third-Party Services
We share personal data only with processors necessary to deliver the service. All processors are bound by data processing agreements (DPAs) in accordance with Art. 28 GDPR:
- Stripe - payment processing. Receives billing contact information and processes card data on our behalf. EU customers are served by Stripe Payments Europe, Ltd. (Ireland).
- Hetzner Online GmbH - cloud infrastructure and hosting. Stores and processes data on servers located in the EU on our behalf.
- Transactional email provider - delivery of system emails. Receives your email address and the content of system notifications. The provider is located outside the EU/EEA; see International Data Transfers below.
- tawk.to inc. - live chat support inside the signed-in application. Receives the messages you send and technical data required to operate the chat session.
We do not sell or share your personal data with third parties for marketing purposes.
International Data Transfers
Some of our processors transfer personal data outside the EU/EEA. Transfers to Stripe's US entities are safeguarded by the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) approved by the European Commission. Transfers to our transactional email provider and to tawk.to (US) are safeguarded by Standard Contractual Clauses. In all cases an adequate level of protection for your data is ensured.
Cookies, Analytics, and Chat
This website sets no cookies. For web statistics we use a self-hosted, cookieless analytics tool running on our own EU-hosted infrastructure. It stores nothing on your device, collects only aggregated usage statistics, and shares no data with third parties.
The signed-in application uses a session cookie strictly necessary for authentication, and offers a live support chat (Tawk.to), which sets cookies required to operate the chat session. We do not use advertising or third-party tracking cookies.
Data Retention
Account and usage data is retained for as long as your account is active. Audit logs, including IP addresses, are kept while your account is active and are included in your data export. When an account is deleted it is permanently purged, including audit logs, after a 30-day grace period. Billing records are retained for 5 years from the end of the financial year they concern, to comply with Danish bookkeeping requirements. Enquiries are kept only as long as needed to handle them.
Security
We protect personal data with appropriate technical and organisational measures (Art. 32 GDPR), including encryption in transit (TLS), role-based access controls, and hosting on EU-located infrastructure.
Automated Decision-Making
We do not use your personal data for automated decision-making or profiling within the meaning of Art. 22 GDPR.
Your Rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Export your data in a portable format
- Object to or restrict certain processing activities
- Lodge a complaint with the Danish Data Protection Agency (Datatilsynet), www.datatilsynet.dk
You can exercise these rights from your account settings under Privacy & Data, or by contacting us at hello@noteclearly.com.
Changes to This Policy
We may update this policy from time to time. Material changes will be announced by email and reflected in the "Last updated" date at the top of this page.
Contact
For privacy-related inquiries please contact us at hello@noteclearly.com.