Privacy Policy

1. What data we collect

We collect information you provide when signing up and using NoteyPad:

• Account information: name, email address, job title, company name.
• Usage data: tasks created, messages sent, calendar events, CRM records.
• Technical data: IP address, browser type, device type, access timestamps.
• Files and attachments uploaded to NoteyPad (chat, documents).

2. How we use your data

• To provide and improve the NoteyPad platform.
• To send account-related notifications and billing information.
• To detect and prevent fraud or security breaches.
• To comply with legal obligations under Australian law.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Where data is stored

All data is stored in Australia (Sydney, ap-southeast-2 region) using Supabase infrastructure. We do not transfer personal data outside Australia without your explicit consent, except where required by law.

4. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

5. Your rights (AU Privacy Act)

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

To exercise these rights, use the Data & Privacy section in Settings, or contact us at hello@workingwithnate.com.

6. Cookies

NoteyPad uses strictly necessary session cookies for authentication. We do not use tracking cookies or third-party advertising cookies.

7. Third-party services

NoteyPad uses the following third-party services, each governed by their own privacy policies:

• Supabase — database and authentication
• Vercel — hosting and CDN
• Resend — transactional email
• LemonSqueezy — payment processing

8. Security

We use industry-standard security practices including encrypted connections (TLS), row-level security on all database tables, and regular security audits. If you discover a security issue, please contact hello@workingwithnate.com.

9. Changes to this policy

We will notify you of material changes to this Privacy Policy via email or in-app notification at least 14 days before the changes take effect.