Privacy Policy

Information we process

NoteTunnel processes account information such as your name, email address, password hash, time zone, account status, workspace memberships, and security records. It also processes the notes, messages, Tunnel data, files, reminders, and other content you choose to store.

Payments

Payment card details are handled by Paddle, not stored by NoteTunnel. NoteTunnel stores the transaction references, price identifiers, status, amount, currency, and customer references needed to grant paid access, handle refunds, provide support, and maintain business records.

Files and cloud storage

Production file uploads may be stored in a private Cloudflare R2 bucket. NoteTunnel stores file metadata and access rules in its database. Authorized downloads use short-lived signed access or NoteTunnel authorization checks.

Security and operations

We process session records, login attempts, rate-limit records, audit events, and limited network information for account security, abuse prevention, debugging, and service operation. Security records are kept only as long as reasonably needed for those purposes.

Email and notifications

Email is used for verification, password recovery, account messages, and support. Browser Push subscriptions are stored only after you opt in and can be removed by disabling notifications on your browser or account.

Sharing

Content is visible to workspace members and people using public share links only according to the access settings you or the workspace owner create. Do not share a public link with people who should not see its content.

Service providers

NoteTunnel may rely on infrastructure and service providers such as hosting, Cloudflare R2, Paddle, and an email delivery provider. Those providers process the data required to perform their service.

Retention and deletion

Workspace content remains until you or an authorized workspace owner deletes it, subject to backups and operational retention. Account deletion removes or anonymizes personal profile data where practical and deletes owned workspace files. Financial records may be retained when needed for accounting, fraud prevention, dispute handling, or legal obligations.

Your requests

For access, correction, deletion, billing, or privacy questions, contact support@notetunnel.com. We may need to verify the account before acting on a request.