Privacy Policy

Wise Noted is operated by Deinora OÜ in Estonia. This policy explains how we handle personal data when you use Wise Noted at wisenoted.com, including the installed web app.

For privacy questions or requests, contact info@deinora.com.

Depending on how you use the service, we process:

• Account data: your email address, authentication provider identifiers, basic profile details, session information and account preferences.
• Your content: recordings and uploaded audio, typed or pasted text, supported document uploads, transcripts, generated or edited notes, document history, projects and your audio-retention choice.
• Service and credit records: processing requests, quotes, credit reservations and ledger entries, plan and entitlement status, and operational records needed to deliver or troubleshoot the service.
• Payment records: Paddle customer, subscription and transaction references, purchase status and entitlement information. We do not receive or store full payment-card details.
• Security and anti-abuse data: limited event information and keyed, pseudonymous hashes derived from a device token or network address. The application does not intentionally store raw IP addresses in its anti-abuse tables.
• Device storage: authentication state, short-lived recovery drafts, install-prompt preferences and similar settings stored in your browser or installed app.

We use personal data to provide and secure Wise Noted, including to authenticate users, process content, save notes, maintain history, calculate and apply credits, provide paid entitlements, recover incomplete work, answer support requests, prevent abuse and comply with legal obligations.

Where EU data-protection law applies, we generally rely on performance of our contract to provide requested features; our legitimate interests in securing, maintaining and improving the service; compliance with legal obligations for payment, tax and lawful requests; and consent where the law requires it. The appropriate basis depends on the data and context. You may contact us for more detail about a specific processing activity.

Audio is processed server-side for transcription using ElevenLabs Scribe v2. The resulting transcript, and text or supported documents you submit, may then be sent through our AI gateway to routed model providers for cleanup and structure. We send the content needed to perform the action you request. Provider availability and routing may change as the service evolves.

Completed notes, documents, projects and available text history are stored in our private backend so you can access them from your account. AI output can contain mistakes; review important content before relying on it.

Source audio is deleted by default after transcription, cleanup, structuring and the resulting note have been saved successfully. Pro users may instead choose before processing to keep the original audio for 24 hours or to save it. Audio selected for 24-hour retention is automatically deleted after that period; audio explicitly saved remains until the user deletes the related data or account, subject to operational and legal requirements.

If a job fails or remains incomplete, its audio or other pending input may be kept for recovery for up to six hours. Expired and orphaned temporary source files are removed by scheduled and backup cleanup processes. Recordings and uploads follow the same policy.

You may sign in with Google OAuth or an email sign-in link or code. Authentication providers process information under their own privacy terms. We use account and session information to keep your content linked to you and enforce access controls.

Paddle.com is the Merchant of Record for paid Wise Noted plans and credit purchases. We share the data needed for the sale (such as your email address and account identifier) with Paddle for checkout, subscription management, payments, tax compliance and invoicing. Paddle processes payment details under its own privacy terms; Wise Noted receives only the identifiers and status information needed to verify purchases and maintain entitlements, never full card details.

Wise Noted uses browser storage and, where applicable, cookies to maintain authentication, remember limited preferences, support a pseudonymous device token for security controls, and preserve short-lived drafts for recovery. Larger pending audio or document drafts may be held locally in your browser database. Clearing browser data can remove locally stored recovery material.

To understand how the service is used, Wise Noted counts page views, the general traffic source (for example Google, Facebook or direct) and campaign tags in the address. These counts are processed on our own servers and do not use advertising or third-party trackers, cookies, or browser storage. We do not store your IP address, account ID, the full web address or any note content for this purpose; instead we derive a pseudonymous key from your network address and browser details that changes every day, so visits cannot be linked across days or to your account. Only aggregate totals are shown to the service administrator. Our legal basis is our legitimate interest in operating and improving the service.

The installed web app caches only public static resources such as app files, icons, the manifest and an offline page. It is designed not to cache page content, authentication responses, private notes, account or credit data, payment state, uploads or AI results. No technical measure can guarantee absolute security, but we limit this cache to reduce the risk of private data remaining there.

We share data only as needed to operate the service, including with hosting, database and authentication infrastructure; ElevenLabs for transcription; AI gateway and model providers for requested processing; Paddle for payment and entitlement handling; and service providers that support security or delivery. We may also disclose data when required by law or to protect users, the service or legal rights.

Some providers may process data outside Estonia or the European Economic Area. Where required, we rely on applicable safeguards for international transfers, such as an adequacy decision or approved contractual protections. Providers process data under their own terms and data-handling commitments.

Account content is generally retained while your account remains active or until you delete it, subject to the specific audio and recovery periods above. Payment, credit and operational records may be kept as needed for accounting, fraud prevention, dispute handling and legal obligations. Backup copies may remain for a limited period before routine deletion.

Pseudonymous anti-abuse signals are retained only for limited safeguards. Signals specifically preserved after account deletion are generally kept for seven days, or while an already-issued temporary free-credit restriction remains active. Some pseudonymous device-account and security records may be retained for up to 30 days under current safeguards. We do not use these signals to restore deleted content or reconstruct a deleted identity.

We use account authentication, private storage, row-level access controls, server-side authorization and other technical and organisational safeguards intended to protect data. No online service can promise absolute security.

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing of your personal data, receive a portable copy, and withdraw consent where processing relies on consent. You may also complain to the Estonian Data Protection Inspectorate or another competent supervisory authority.

You can delete your account from the Account page. This removes the account and its saved notes, documents, projects and uploads. Limited pseudonymous anti-abuse evidence may remain for the periods described above, without restoring your deleted identity or content. To make another request, email info@deinora.com. We may need to verify your identity before completing it.

Wise Noted is not directed to children who cannot lawfully consent to an online service or whose use requires a parent or guardian’s authorisation. If you believe a child has provided personal data without the required authorisation, contact us so we can review and remove it where appropriate.

We may update this policy when the service or legal requirements change. We will post the revised version here and update the date above. If a change materially affects how we use personal data, we will provide additional notice where appropriate.

Deinora OÜ, Estonia
Email: info@deinora.com
Website: https://wisenoted.com