Privacy Policy

Information we collect

When you sign in with Google, we receive your name, email address, and profile image from Google so we can create your CleoNote account. We do not receive your Google password.

When you upload audio, PDFs, or paste YouTube links, we store the source file (or the extracted text) so we can transcribe it, generate notes, flashcards, quizzes, and mind maps for you.

We collect basic product analytics — page views, feature usage, and anonymized error reports — to understand how the product is used and to fix bugs.

How we use your data

Your uploads and transcripts are used solely to generate the learning assets that belong to you: notes, flashcards, quizzes, and mind maps. They are never sold or shared with advertisers.

We pass text to OpenAI to run transcription and generation. OpenAI processes the content on our behalf and, under our API agreement, does not train its models on your data.

If you start a paid subscription, we use Stripe to process the payment. CleoNote stores only the non-sensitive identifiers Stripe returns (customer id, subscription id, plan status). We never see your full card number.

Storage and retention

Uploaded files are stored in Cloudflare R2 object storage and referenced from a Supabase Postgres database that holds your note projects, transcripts, flashcards, and quiz history.

You can delete a note project at any time from the dashboard. When you do, the underlying transcript, generated content, and source file are removed from our systems shortly after.

If you delete your account, all of your note projects and associated files are removed. Anonymized analytics events may be retained for product metrics.

Third-party services

CleoNote relies on a small set of vendors to operate: Google (sign-in), OpenAI (transcription and generation), Cloudflare (file storage and background jobs), Supabase (database), Stripe (billing), and Plausible (privacy-friendly analytics).

Each of these vendors only receives the data needed for its function, and each is bound by its own privacy terms.

Your rights

You can export or delete your data at any time from your account settings. If you are in a jurisdiction with data-protection laws (GDPR, CCPA, and similar), you can also email us to request access, correction, or deletion of your personal data.

We will respond to verified requests within 30 days.

Changes to this policy

If we make meaningful changes to this policy, we will update the date at the top and notify signed-in users by email before the changes take effect.

Contact

Privacy questions can go to support@cleonote.com. We typically reply within 2 business days.