Privacy

Privacy Policy

We are focused on being as transparent as possible. For us at Elasticnote, that means having a privacy policy that is straightforward, practical and easy to understand.

Business name: Elasticnote

The Elasticnote website and supporting services are hosted by OVH. Server-side data used by Elasticnote is stored on dedicated OVH infrastructure in the Sydney region.

Your data

Elasticnote is designed to be local first.

Your notes, notebooks, research materials, documents, Markdown and LaTeX content, uploaded files, generated content, AI workspace data, API keys, project files and other workspace content are not automatically uploaded to Elasticnote servers.

Where supported, Elasticnote stores your notebooks and workspace data locally in your browser, browser databases or through browser-supported filesystem access. This allows you to keep your working data on your own device and under your control.

You can use Elasticnote without creating an Elasticnote account.

Some optional features may require authenticated server access or communication with a third-party service. When you explicitly choose to use one of these features, only the information reasonably required to provide that feature is transmitted.

Examples may include cloud storage integrations, AI providers, authentication, licensing, payments, support services or other features that require external processing.

If you create or sign in to an Elasticnote account, we may store information required to operate that account, such as your email address, profile information, preferences, licence or subscription entitlements, support information and limited operational data.

Elasticnote does not automatically maintain server-side copies of your local notebooks or projects simply because you are signed in.

Cloud storage

Elasticnote may allow you to connect your own storage services, including services such as:

Dropbox · Google Drive · Microsoft OneDrive · GitHub · Local folders

These integrations are optional.

When you connect a third-party storage provider, Elasticnote may transfer notebook or project data to that provider only as required to perform the action you requested.

Content stored through a third-party provider is also subject to that provider's own privacy policy, security practices and terms of service.

Elasticnote does not claim ownership of files stored in your connected storage accounts.

AI providers

Where Elasticnote supports local AI, compatible AI models may operate directly on your device without sending your project content to Elasticnote servers.

If you choose to connect a third-party AI provider through a Bring Your Own Key (BYOK) feature, requests may be sent directly to that provider.

Those requests are subject to the provider's own privacy policy, data retention practices and terms of service.

Where a BYOK feature is designed to operate locally, Elasticnote does not need to permanently store your AI provider credentials on its servers.

You should avoid submitting sensitive or confidential information to an external AI provider unless you are comfortable with that provider's policies.

How we use personal data

We never sell your personal data.

We do not share your personal data with other companies, communities or individuals except where reasonably necessary to:

• provide a feature or service you have explicitly chosen to use;
• process payments, subscriptions or licensing;
• operate essential infrastructure;
• provide authentication, support or security;
• comply with applicable law; or
• act with your authorisation.

We collect the minimum amount of personal data reasonably required to operate Elasticnote, maintain accounts and entitlements, support users, protect the service and improve the product.

Nothing more than we reasonably need.

Where analytics are collected, we aim to keep that information anonymous or aggregated wherever practical.

We do not need to know every action taken by an identifiable user in order to improve Elasticnote.

We may use anonymised or aggregated usage information such as page views, feature usage, application errors, performance information and similar operational data to identify issues and improve the service.

Deleting your data

You may request deletion of personal data associated with your Elasticnote account regardless of where you live.

If you would like account data deleted, contact us by email and we will process your request as soon as reasonably possible.

Please note: deleting an account may also remove associated licences, purchases, subscriptions, account entitlements, cloud-stored information and access to premium features linked to that account.

Data stored only on your own device, browser, local folder or connected third-party storage may need to be deleted directly by you because Elasticnote may never have received or stored that data.

Cookies and local browser storage

Elasticnote uses cookies and similar browser technologies where they are reasonably required to operate the service, maintain sessions, remember preferences, improve security and provide application functionality.

We do not intentionally set cookies that serve no reasonable purpose.

Privacy is important to us, and we aim to keep the number of cookies and tracking technologies used by Elasticnote to a minimum.

Some third-party services used by Elasticnote may set their own cookies or similar technologies.

Where analytics services are used, we aim to configure them to minimise the collection of personally identifiable information.

As a local-first web application, Elasticnote may use technologies including:

Cookies · Local storage · IndexedDB · Cache storage · Filesystem permissions · Browser databases

These technologies can be essential to Elasticnote's local-first architecture because they allow notebooks and application data to remain on your device instead of being continuously transferred to our servers.

Clearing browser storage, browser profiles or application data may permanently remove locally stored Elasticnote content if you have not backed it up elsewhere.

Intellectual property

The content you create, write, upload, import or otherwise add to Elasticnote remains yours.

This may include:

notes, notebooks, research, documents, Markdown files, LaTeX projects, images, datasets, citations, diagrams, uploaded resources, generated files, project files and other content you create or manage using Elasticnote.

Using Elasticnote does not transfer ownership of your content to us.

You are responsible for ensuring that you have the appropriate rights or permission to use any content you upload, import, process or distribute through Elasticnote.

What belongs to Elasticnote?

Elasticnote retains ownership of its own intellectual property.

This includes, where applicable:

the Elasticnote name and branding, website and application design, platform source code, software, documentation, original graphics and content created by us unless otherwise stated.

Third-party software, libraries, models, logos, trademarks and other third-party materials remain the property of their respective owners and may be subject to separate licences and terms.

Third-party services

Elasticnote may integrate with third-party services for purposes including:

cloud storage, AI processing, payments, licensing, authentication, infrastructure, error monitoring and other optional functionality.

Information is shared with those services only where reasonably required to provide the relevant functionality.

When you choose to connect a third-party service, your use of that service is also governed by that provider's privacy policy and terms.

Elasticnote is not responsible for the privacy practices of third-party services outside our control.

Security

We take reasonable technical and organisational measures to protect Elasticnote accounts, infrastructure and server-side data.

We maintain our software and dependencies and aim to apply relevant security updates when they become available.

Elasticnote is also designed around the principle of minimising unnecessary server-side data collection.

Keeping appropriate project and notebook data locally can reduce the amount of personal information that needs to be transmitted to or stored on our infrastructure.

However, no website, application, computer system, network or method of electronic storage can be guaranteed to be completely secure.

You are also responsible for protecting your:

account credentials, devices, browser profile, API keys, local files, backups and third-party accounts connected to Elasticnote.

We recommend maintaining appropriate backups of important notebooks and project files.

Policies concerning children

Elasticnote is not directed toward children under the age of 18.

We do not knowingly market, advertise or otherwise target Elasticnote to children.

If you believe that a person under the age of 18 has created an account or provided personal information to Elasticnote, please contact us so that we can review the situation and take appropriate action.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time as Elasticnote changes, new functionality is introduced, legal requirements change or our data practices evolve.

When our privacy practices change, this Privacy Policy will be updated accordingly.

If we make material changes that significantly affect how we handle personal data, we may also notify registered users by email, through Elasticnote or by another appropriate method.

We encourage you to review this Privacy Policy periodically so that you understand how Elasticnote handles your information.

Browser Extensions

Browser extension

The Elasticnote browser extension is local first. Notes, notebooks, tasks, checklists, Kanban data, tags, attachments, revisions, preferences and local search data are stored on the user's device by default.

Elasticnote does not automatically monitor browsing activity or build a browsing-history profile. When a user explicitly chooses a feature such as Capture selection, Capture page, Screenshot or Summarize, the extension may temporarily access the active page and process the content selected by the user, together with information needed to identify the source such as the page URL, title and capture time.

Optional cloud-storage integrations may transmit workspace content to the storage provider selected by the user. Optional cloud-AI features transmit only the content required for the action requested by the user to the selected provider. OAuth credentials and API credentials are handled only as necessary to connect services the user explicitly enables.

Elasticnote does not sell browser-extension user data, use it for personalized advertising, or use it to determine creditworthiness or for lending purposes.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Privacy acceptance

By accessing or using Elasticnote, you acknowledge that you have read and understood this Privacy Policy.

Your use of Elasticnote is also subject to any applicable Terms of Service and othe