Privacy policy

DRAFT TEMPLATE, NOT LEGAL ADVICE. This page is a placeholder and has not been reviewed by a lawyer. Bracketed items must be completed before launch.

Effective: [EFFECTIVE DATE]

[BUSINESS LEGAL NAME] ("Notes2Deck", "we") operates notes2deck. This policy explains what we collect and why.

What we collect

• Notes you submit (pasted text, uploaded files, imported Notion pages). We process them to generate your deck. We do not store the text after generation, except transiently in server memory and logs that record sizes and counts, not content.
• Account data: your email address, used for magic-link sign-in and receipts.
• Billing data: handled by Stripe. We store your Stripe customer ID and plan status, never your card number.
• Technical data: IP address and request metadata for rate limiting and abuse prevention, kept for up to [N] days.

Service providers

• xAI (AI model provider): receives your note text to generate cards. [Confirm xAI API data-retention terms.]
• Vercel (hosting), Upstash (rate limits and account records), Stripe (payments), Resend (sign-in emails), Cloudflare Turnstile (bot checks, if enabled).

Your choices

You can ask us to delete your account and associated records by emailing [CONTACT EMAIL]. [Add GDPR/CCPA rights language if applicable.]

Cookies

We use a session cookie for sign-in and no advertising cookies.

Contact

[BUSINESS LEGAL NAME], [POSTAL ADDRESS], [CONTACT EMAIL]