Legal & Privacy

Privacy Policy

This Policy explains how NoteRefiner collects, uses, discloses, and protects personal information when you use our Service.

Last updated: September 27, 2026

Related: Terms of Service · Responsible Use

NoteRefiner ("NoteRefiner," "we," "us," or "our") provides AI-assisted writing refinement at https://www.noterefiner.com and related apps and APIs (the "Service"). This Privacy Policy applies to personal information processed in connection with the Service. By using the Service, you acknowledge this Policy. Where consent is required by law, we will request it separately.

1. Who we are and scope

For applicable data-protection laws, NoteRefiner is the controller of personal information described in this Policy, except where we process data solely on behalf of an organizational customer under a separate agreement (in which case that customer is the controller and we act as a processor). Contact: noterefiner@gmail.com.

2. Information we collect

  • Account and identity data: name, email address, authentication identifiers, profile image, and similar data provided via our auth provider.
  • Billing and transaction data: subscription status, plan, credits, invoices, and payment metadata processed by our payment provider (we do not store full card numbers on our servers).
  • Content you submit: text and files you send for refinement, API payloads, and related history records needed to operate features you use.
  • Usage and device data: IP address, browser/device type, approximate location derived from IP, pages viewed, referring URLs, timestamps, and diagnostic logs.
  • Communications: messages you send via contact forms, email, or support channels.
  • Cookies and similar technologies: session, preference, security, and (where permitted) analytics/marketing cookies. See Section 8.

3. How we use information

We process personal information to:

  • Provide, authenticate, secure, and maintain the Service
  • Process refinements, meter credits, and operate account, team, and API features
  • Process payments, prevent fraud, and fulfill contractual obligations
  • Respond to support requests and send service-related notices
  • Improve reliability, safety, and product quality (including aggregated analytics)
  • Comply with law, enforce our Terms, and protect rights, safety, and integrity
  • Send marketing where permitted by law (you may opt out of non-essential marketing)

4. Legal bases (EEA/UK/Switzerland and similar)

Where the GDPR or UK GDPR applies, we rely on one or more of:

  • Contract: processing needed to provide the Service you request
  • Legitimate interests: securing the Service, preventing abuse, improving features, and limited direct marketing where balanced against your rights
  • Consent: where required (e.g., certain cookies or marketing)
  • Legal obligation: tax, accounting, or lawful requests

5. Sharing and processors

We share personal information with service providers that process it on our instructions, including categories such as: authentication, database hosting, payment processing, email delivery, analytics (if enabled), cloud infrastructure, and AI model providers used to generate refinements. We may also disclose information: (a) with your direction; (b) to affiliates under this Policy; (c) in connection with a merger, acquisition, financing, or sale of assets; (d) to comply with law or legal process; or (e) to protect the rights, property, or safety of NoteRefiner, users, or the public. We do not sell personal information for money. Under some U.S. state laws, certain advertising or analytics disclosures may be considered a "sale" or "sharing"; where those laws apply, you may exercise opt-out rights as described in Section 9.

6. International transfers

We and our processors may process personal information in the United States and other countries that may not provide the same level of data protection as your home country. Where required, we use appropriate safeguards such as Standard Contractual Clauses (or equivalent mechanisms) for transfers from the EEA/UK/Switzerland, and we take steps designed to ensure personal information remains protected in accordance with this Policy.

7. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, comply with legal, tax, and accounting requirements, resolve disputes, and enforce agreements. Retention periods vary by data category and legal requirements. When information is no longer needed, we delete or de-identify it in accordance with our practices, subject to technical limitations and backups.

8. Cookies and tracking

We use essential cookies for authentication, security, and core functionality. With your consent where required, we may use analytics or marketing technologies. You can control cookies through your browser settings and, where offered, our cookie preferences. Blocking essential cookies may impair the Service.

9. Your rights by region

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing; to portability; to withdraw consent; and to lodge a complaint with a supervisory authority. Additional regional notes:

  • EEA / UK / Switzerland: GDPR / UK GDPR rights as summarized above; you may contact your local data-protection authority.
  • California and similar U.S. states (e.g., CPRA and analogous laws): rights to know, delete, correct, and opt out of sale/sharing or certain targeted advertising, and not to be discriminated against for exercising rights. We will honor verifiable consumer requests as required by law.
  • Canada, Australia, Brazil, and other jurisdictions: we will respond to requests consistent with applicable local privacy statutes (including PIPEDA, Australian Privacy Principles, and LGPD where they apply).

To exercise rights, email noterefiner@gmail.com with sufficient detail to verify your identity and locate your data. We may decline or limit requests where the law allows (for example, to protect others' rights, combat fraud, or meet legal obligations).

10. Security

We implement administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for safeguarding account credentials and API keys.

11. Children

The Service is not directed to children under 13 (or under 16 where a higher age is required by local law). We do not knowingly collect personal information from such children. If you believe we have, contact us and we will take appropriate steps.

12. Automated processing

Refinement features use automated systems, including third-party AI models, to transform text you submit. These systems are not used to make legal or similarly significant decisions about you without human involvement beyond providing the requested writing output.

13. Changes

We may update this Policy by posting a revised version on this page and changing the "Last updated" date. Material changes may be communicated by email or in-product notice where appropriate. Continued use after the effective date means you acknowledge the updated Policy.

14. Contact

Privacy questions or requests: noterefiner@gmail.com. For Terms governing use of the Service, see our Terms of Service.

Email

noterefiner@gmail.com

We aim to respond to privacy requests within timeframes required by applicable law.