We do not sell or share your personal information
notdocs does not sell personal information, and does not share it for cross-context behavioural advertising, as the California Consumer Privacy Act (as amended by the CPRA) and similar laws in other US states define those terms. There are no advertising or analytics trackers on notdocs.dev, and nothing we hold is given to anyone for their own purposes. The providers that do process data for us are on the subprocessors page, and each processes it only to provide the service.
Because nothing is sold or shared, there is nothing to opt out of. You can still send an opt-out request, and we will record it and confirm it, so that it applies if that ever changes.
Global Privacy Control
We honour the Global Privacy Control signal. A browser that sends it is treated as an opt-out of sale and sharing for that browser, which today changes nothing, because there is no sale or sharing to stop.
What we collect, and why
This is the notice at collection. The full account, with retention periods, is in the privacy policy.
| Category | Examples | Why |
|---|---|---|
| Identifiers | Name, email address, account id, GitHub login | To give you an account and sign you in |
| Commercial information | Plan, billing status, invoices (held by Polar) | To sell and bill a paid plan |
| Internet activity | Change events, token usage, request logs at Vercel and Clerk | To run, secure and debug the service |
| Content you provide | Documents, comments and their index, assistant prompts | To provide the service you asked for |
We do not collect sensitive personal information for the purpose of inferring characteristics about you, and we do not knowingly collect information from anyone under 16.
Your rights
Depending on the state you live in, you can ask to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to opt out of its sale or sharing. We will not treat you differently for asking.
To make a request, write to privacy@notdocs.dev from the address on your account, or say which account the request is about. We may ask you to confirm that address before we act. An authorised agent can make a request for you with your signed permission. We answer within 45 days. If we decline a request, we tell you why, and you can appeal by replying to that answer.
Who this applies to
The California and other state privacy laws apply to businesses above thresholds of revenue or of the number of people whose data they handle, and notdocs may be below them. We follow this page regardless, for every user in the United States.