Legal
Data processing summary
Last updated 2026-10-29
This page summarises how Notemark processes personal data on your behalf. It is not itself a signed data processing agreement; to request one, email support@notemark.app.
Who does what
For the content in your workspace, including the names and email addresses of people you invite to review, you are the controller and the company operating Notemark is the processor. For account, billing and usage data about you, we are the controller, as set out in our privacy policy.
Processing on your instructions
We process workspace content only to run the features you use: storing it, showing it to the people you share with, sending notifications, pushing comments to the integrations you connect, and writing AI ticket titles. We do not sell it or use it for advertising.
Confidentiality
Only people who need access to run or support the service can reach customer data, and staff support actions are recorded in an audit log.
Security
The technical measures we use are described on our security page.
Subprocessors
We use the subprocessors listed on our subprocessors page, each bound by its own data protection terms, and we update that page before adding a new one.
International transfers
Workspace data is stored in the United States. The mechanism for transfers of EU and UK personal data will be set out in the signed agreement.
Helping you meet your obligations
You can export or delete content in the app. For requests from the people whose data is in your workspace that you cannot handle there, email support@notemark.app and we will help.
Security incidents
If we become aware of a breach affecting personal data in your workspace, we will tell the workspace owner without undue delay, with what we know and what we are doing about it.
Deletion
When you delete content it is removed straight away. When a workspace is deleted it is removed on the schedule in our privacy policy and terms, and backups age out on our database provider's schedule.