Privacy Policy

This policy describes what GetNotes collects, why we collect it, and who it is shared with. It is written to be read, not to be survived.

What we collect

Account details. Your name, and the email address or mobile number you sign in with. These come from Google or from the OTP you verify. We never see or store a password, because the product has none. You may optionally add your college, course and semester.

Device and session information. When you sign in we record your browser, operating system, screen resolution, timezone, graphics renderer and IP address, and combine them into a device fingerprint. This is how we enforce one active device per account and how we notice a session being used somewhere unexpected.

Reading activity. Which notes you open, the page you reach, and time spent reading. This drives your progress, bookmarks and library.

Security events. Attempts to copy, print, screenshot or open developer tools while reading protected content, along with the device and time. Purchased notes are licensed for your own reading and these records are how we detect redistribution.

Payments. Razorpay processes payments. We store the amount, status, method and Razorpay's transaction reference. We never receive or store your card number, UPI PIN or bank credentials.

Why we collect it

• To give you access to what you have bought, and to keep your place
• To enforce that a purchase is for one person, not a group
• To detect and investigate unauthorised copying or sharing
• To take payment and issue invoices
• To tell you about purchases, security events and new material

Watermarking

Every page of protected content displays your name, email or mobile number, and the time you opened it. We also record each opening against your account. If a page appears somewhere it should not, it can be traced to the account that opened it. This is deliberate and it is the main reason the content can be sold at all.

Who we share it with

We do not sell your data and we do not share it for advertising. It reaches only the services needed to run the product:

• Google Firebase: sign-in
• Razorpay: payments
• Cloudflare R2: encrypted storage of page images
• Railway and Vercel: hosting
• Sentry: error reporting, when enabled

We may disclose information where the law requires it, or where it is necessary to investigate content theft.

How long we keep it

Account, purchase and payment records are kept while your account exists and afterwards for as long as tax and accounting rules require. Security events and device records are kept while they remain useful for investigating misuse. Reading activity is kept while your account exists.

Your choices

• Edit your profile at any time from your profile page
• See your devices and sign-in history, and sign out of everything
• Report unauthorised access, which ends every session immediately
• Ask us to delete your account. We cannot delete purchase and payment records, which are financial records. We remove the rest and end your access

Security

Page images are encrypted at rest. Session credentials are httpOnly cookies that scripts cannot read. Content is delivered page by page under short-lived signed tokens rather than as downloadable files. No system is perfectly secure, and we do not claim otherwise.

Children

GetNotes is intended for students in higher education and is not directed at children under 13.

Changes

If we change this policy materially we will say so in the product rather than quietly updating the date.

Contact

Questions about this policy, or a request about your data, go to our contact page.