Privacy policy
Last updated 2026-10-15
This policy explains what Notemark collects when you use the web app and the Notemark browser extension, why, and what control you have over it.
What we collect
Account details: your name, email address, and the sign-in method you use (password, Google, passkey or single sign-on). Workspace content: the pages and designs you add as canvases, comments, pin positions, the page element each comment points at (its selector and a short HTML snippet), screenshots, and screen recordings and images you choose to attach to a comment. Billing: your plan and invoices. Stripe holds your card details; we never see or store card numbers. Usage and diagnostics: pages viewed, features used, error reports, and session recordings of how you use the Notemark app, with form inputs masked. Reviewer details: when someone opens a canvas through a share link we store the name and email address they enter at the prompt, and we log each visit and comment they make with its time, IP address and browser so the canvas owner can see who reviewed their work. The same visit log records workspace members who open a canvas.
The Notemark browser extension
The extension does nothing on a page until you click its icon there, or until you allow it on a site so your comments appear when you visit. On those pages it sends your Notemark workspace the page address, the element you comment on, a screenshot of the visible tab, your browser, screen and window size, and recent console errors and failed network requests from that page, with their query strings removed. It does not track your browsing, read other pages or collect browsing history. It keeps your sign-in token in the browser's extension storage on your device. Permissions: "activeTab" and "scripting" let it run on the tab where you click it; "storage" keeps you signed in; "alarms" refreshes your sign-in before it expires; access to a website is requested only when you choose to show comments on that site automatically.
How we use it
To run the service: show your canvases and comments to the people you share them with, send the notifications you ask for, and create tasks in tools you connect. To keep it secure and working: detect abuse, rate-limit requests, and fix errors. To improve it: understand which features are used. With your consent, to send product emails, which you can stop at any time from the link in each email.
What we never do
We do not sell your data. We do not use it for advertising, to build profiles unrelated to Notemark, or to decide credit or lending. We do not transfer it to anyone except the service providers below and the people and tools you choose to share with.
Service providers
We use these providers to run Notemark, each only for its stated job: Supabase (database, file storage, sign-in), Vercel (hosting), Stripe (payments), Resend (email), PostHog (product analytics and session recordings), Sentry (error reports), Upstash (rate limiting and caching), and Anthropic (AI summaries of comments, only when you use AI features). If you connect Slack, Linear, Jira, Asana, Notion or ClickUp, we send the comment details you choose to that tool.
How long we keep it
We keep your content while your account or workspace exists. When you delete a comment, canvas or recording, we delete it and its stored files, including images attached to its comments, straight away. When a workspace is deleted it can be restored for a short period and is then removed; images attached to its comments are deleted straight away and do not come back if it is restored. Error reports and analytics data expire under those providers' own retention settings. Canvas visit and comment activity logs are kept for as long as the canvas exists and are deleted with it. Notifications you have read are deleted 90 days after you read them, and unread notifications 30 days after the latest activity they report.
Your choices
You can view, change, export or delete your content in the app. To have your account and all of its data deleted, or to ask what we hold about you, email us at the address below. We will answer within 30 days.
Contact
Questions about this policy or your data: support@notemark.app.