Privacy Policy

At PixelNotes ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our note-taking application and services.

1. Information We Collect

Information You Provide

• Account Information: When you sign up with Google, we receive your name, email address, and profile picture from Google OAuth.
• Note Content: All notes, documents, and content you create in PixelNotes.
• Voice Data: When using voice input, audio is processed to convert speech to text. Audio is not stored permanently.
• Communication: When you contact support or communicate with our team.

Automatically Collected Information

• Usage Data: How you interact with PixelNotes (features used, session duration, clicks).
• Device Information: Browser type, operating system, IP address, device identifiers.
• Performance Data: Error logs, crash reports, and diagnostic information.
• Cookies: We use cookies and similar technologies to maintain your session and preferences.

2. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: Provide, maintain, and improve PixelNotes functionality.
• AI Features: Process your notes with PI to provide intelligent suggestions, summaries, and insights.
• Personalization: Customize your experience based on your usage patterns and preferences.
• Communication: Send service updates, security alerts, and support messages.
• Security: Protect against fraud, unauthorized access, and security threats.
• Analytics: Understand usage patterns to improve features and user experience.
• Legal Compliance: Comply with legal obligations and enforce our terms.

3. Data Storage and Security

Where We Store Data

• User Notes: Stored using browser LocalStorage for demo mode; Google account storage for authenticated users.
• Cloud Infrastructure: Enterprise plans use secure cloud servers with data encryption.
• Backups: Regular encrypted backups for data recovery.
• Data Residency: Enterprise customers can choose specific data center locations.

Security Measures

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for data in transit
• Multi-factor authentication (MFA) support
• Regular security audits and penetration testing
• SOC 2 Type II certified infrastructure
• Access controls and audit logging

4. Data Sharing and Disclosure

We Do NOT Sell Your Data

We never sell, rent, or trade your personal information or note content to third parties.

When We Share Information

We may share your information only in these limited circumstances:

• With Your Consent: When you explicitly authorize sharing (e.g., sharing notes with team members).
• Service Providers: Third-party vendors who help us operate our services (cloud hosting, analytics, customer support). These providers are bound by confidentiality agreements.
• Legal Requirements: When required by law, court order, or government request.
• Business Transfers: In case of merger, acquisition, or sale of assets (with notification to users).
• Safety and Security: To protect rights, property, or safety of PixelNotes, our users, or the public.

5. Your Rights and Choices

Access and Control

You have the following rights regarding your data:

• Access: Request a copy of all data we hold about you.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your account and associated data.
• Export: Download your notes in portable formats (Markdown, PDF, JSON).
• Objection: Object to certain data processing activities.
• Portability: Transfer your data to another service.

How to Exercise Your Rights

Contact us at privacy@creativepixels.in or use the in-app settings to manage your data preferences.

6. Data Retention

• Active Accounts: We retain your data while your account is active.
• Deleted Accounts: Data is permanently deleted within 30 days of account deletion.
• Backups: Backup copies are retained for 90 days for disaster recovery.
• Legal Hold: Data may be retained longer if required by law or legal proceedings.

7. Children's Privacy

PixelNotes is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. International Data Transfers

PixelNotes operates globally. Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all third-party processors
• Compliance with GDPR, CCPA, and other data protection regulations
• Data residency options for enterprise customers

9. Cookies and Tracking

Types of Cookies We Use

• Essential Cookies: Required for authentication and core functionality.
• Performance Cookies: Help us understand how you use PixelNotes.
• Preference Cookies: Remember your settings and preferences.

Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect functionality.

10. Third-Party Services

PixelNotes integrates with third-party services:

• Google OAuth: For authentication (subject to Google Privacy Policy)
• Google Drive: Optional cloud sync (subject to Google Privacy Policy)
• Analytics Providers: Anonymized usage analytics

These services have their own privacy policies. We encourage you to review them.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via:

• Email notification to your registered email address
• In-app notification banner
• Updated "Last Modified" date at the top of this policy

Continued use of PixelNotes after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

13. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to be informed about data collection and use
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our lawful basis for processing your data: Consent, Contract fulfillment, Legitimate interests, Legal obligations.

14. California Privacy Rights (CCPA)

California residents have specific rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or shared
• Right to opt-out of sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell your personal information.