Privacy Policy

1. Information we collect

• Account data: name, email address, password hash, and session records.
• Workspace and note data: workspace names, note titles, ACL roles, and metadata.
• Collaboration content: note messages and realtime presence details.
• Operational data: server logs and request metadata for reliability and security.

2. How we use information

• Authenticate users and maintain secure sessions.
• Enforce workspace membership and note-level OWNER/EDITOR/VIEWER permissions.
• Provide realtime editing, messaging, and always-on autosave workflows.
• Deliver transactional emails such as workspace invites and membership notices.
• Detect abuse, investigate incidents, and improve product reliability.

3. Sharing and processors

We do not sell personal information. We may share data with service providers that help us deliver core features, such as realtime collaboration infrastructure and transactional email delivery. We may also disclose information when required by law or to protect the security of Notably and its users.

4. Retention and deletion

We retain account and workspace data while your account is active, and for a reasonable period afterward when needed for legal, security, and operational reasons. You can request account deletion at any time by contacting us.

Privacy requests: privacy@caymangeiger.com

5. Security controls

• Password hashes are stored using bcrypt.
• Session cookies are `httpOnly` and scoped for secure authentication flows.
• Realtime room access is authorized server-side before token issuance.
• Role checks gate note edits and messaging permissions.

6. Updates to this policy

We may update this policy from time to time. If changes are material, we will update the effective date and provide notice through the product or other reasonable channels.

Also see: Terms of Service