Privacy Policy
Last updated: May 27, 2026
This Privacy Policy explains how Notiq ("we", "us", "our") collects, uses, and safeguards your personal data when you use the Notiq website and services (the "Service"). We act as the data controller for the personal data described below. We comply with the EU General Data Protection Regulation (GDPR) and applicable data-protection law.
1. Data We Collect
- Account data: name, email address, and authentication identifiers (e.g. via GitHub sign-in or email/password).
- Usage data: the YouTube links you submit, generated notes, your edits, and processing logs (status, progress, errors) tied to your account.
- Billing data: subscription status and customer identifiers. Card details are handled directly by Stripe; we never see or store full card numbers.
- Technical data: IP address, browser type, device, and basic diagnostics needed to run and secure the Service.
2. How We Use Your Data
- To provide the Service — processing videos into notes, flashcards, and study aids.
- To maintain your account, authenticate you, and provide support.
- To process payments and manage subscriptions (via Stripe).
- To monitor, debug, and improve reliability using processing logs.
- To communicate important service or account information.
- To comply with legal obligations and prevent abuse.
3. Legal Bases for Processing
We process personal data under the following GDPR legal bases:
- Contract: to deliver the Service you sign up for.
- Legitimate interests: to secure, debug, and improve the Service.
- Consent: for optional communications, where applicable.
- Legal obligation: for tax, accounting, and compliance.
4. Third-Party Processors
We share data with trusted providers strictly to operate the Service:
- Stripe — payment processing.
- AI providers (e.g. Anthropic, Google) — to generate notes and analyze video frames. Submitted content is sent to these providers for processing.
- Hosting & infrastructure — to run the application and database.
These providers process data on our behalf under appropriate data-processing agreements.
5. How Long Do We Keep Your Data?
We keep account and content data for as long as your account is active. Processing logs are retained for a limited period for debugging and abuse prevention. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records (e.g. invoices) to meet legal obligations.
6. What Are Your Rights?
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion ("right to be forgotten").
- Object to or restrict certain processing.
- Request a portable copy of your data.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local data-protection authority.
To exercise any of these rights, email privacy@notiq.study.
7. Cookies
We use essential cookies to keep you signed in and to operate core features. We do not use cookies to sell your data. If we introduce optional analytics or marketing cookies, we will request your consent first.
8. Data Security
We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls, and regular backups. No system is perfectly secure, but we work to protect your information and will notify you of significant breaches as required by law.
9. International Transfers
Some processors may operate outside the European Economic Area. Where that happens, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your data.
10. Children
Notiq is not directed at children under 16. If you believe a child has provided us personal data, contact us and we will delete it.
11. Changes to This Policy
We may update this Policy from time to time. Material changes will be announced via the Service or email. The "Last updated" date above reflects the latest revision.
12. Contact
Data questions or requests: privacy@notiq.study.
This document is a general template and not legal advice. Have it reviewed by qualified counsel and adapt it to your actual data practices before relying on it.