Privacy policy

Notom (the "Company" or "we") take your privacy very seriously. Our philosophy is to have the smallest privacy footprint possible and to be open, transparent and decent in how we operate with your data.

The purpose of this policy is to describe what information we collect and hold, and what we do with it.

Applicability

This policy applies to all visitors to the Web Site or Documentation, and all standard accounts.

Consent

By submitting your information through our Website or Software you agree to the terms of this policy and expressly consent to the collection, use and disclosure in accordance with this policy.

Compliance

We are compliant with, and operate within the terms of, the GDPR, CCPA and other relevant legislation.

Part of this compliance includes your right to access (and request removal of) any data we hold about you. If you wish to make such a request, please contact us at [email protected]. Requests will be handled in compliance with relevant legislation.

Information we collect & how it is used

Web analytics

Use of our web site and documentation includes basic Web Analytics, so that we can understand the effectiveness of our content.

We use PostHog for product analytics, to understand how people use the application so we can improve it. PostHog may collect basic usage data such as page views and feature interactions. Analytics run only with your consent, given via our cookie banner — if you do not consent, we collect no analytics. We use no other analytics provider and we do not perform any 'fingerprinting'.

Advertising

We may run ads on third-party platforms to reach new customers. To measure whether those ads are effective, we use Google Ads conversion tracking. This runs only with your consent, given via our cookie banner, and operates through Google Consent Mode — so no advertising cookies or identifiers are set unless you agree, and you can withdraw consent at any time via "Manage cookies". We do not sell or share your personal information with advertisers, and we do not use this to build advertising profiles about you.

Your online account

When you sign in or create an account at https://notom.app you use a 3rd party sign-in (e.g. Github, Google, Apple, Microsoft) that you already have and which is governed by the 3rd party's terms.

Through that sign-in, we collect only basic profile information (e.g. name, email, locale, URL to avatar image) which you consent to via your signin provider at the point of signing in. We retain this information for the life of your account with us.

You may provide further details in your online account, as part of using the tool for notes and other purposes. This information is held securely and not disclosed to 3rd parties.

Subscriptions & payments

We use a reputable 3rd party payments processor and we do not collect, hold, store nor have access to your payment details.

We do collect and retain records relating to any payments or subscriptions (e.g. amount paid, when, what for) for the purposes of administering your account and subscription, and for administering our business as required by law.

Forums & communications

If you choose to communicate with us, including participating in any online forum hosted by us, anything you post may be visible to others in accordance with our Terms of Service. Your participation may also be subject to the terms and privacy policies of any 3rd party platform used to host such a forum, which will be made clear for you to review and consent to prior to such participation. Any such participation shall be optional and at your discretion.

3rd party integrations

You may choose to use a number of 3rd party integrations in your use of the Software, e.g. for social sync. Any such activity by you is at your discretion and is bound by the terms you agree with the 3rd party.

Anonymous aggregated data

We reserve the right to share anonymous aggregate data publicly, such as (for example) the relative popularity of different plugins as determined by how many people have installed them.

Such disclosure will be aggregated and anonymous and not contain sufficient detail to identify any customer.

Disclosure

We do not disclose your data to any third party except as expressly outlined in this policy, or with your explicit consent, or for these limited circumstances:

  • to protect, enforce, or defend the legal rights, privacy, safety or property of the Company, our affiliates or their employees, agents and contractors (including enforcement of our agreements and Terms of Use)
  • to protect against fraud
  • to comply with the law, where we are obligated to disclose such data to a government or law enforcement
  • to respond to valid requests from government and public authorities

Such disclosures, if made, may be outside your country of residence.

AI

Your data is not used to train AI models, nor is it disclosed to any AI provider, unless you explicitly opt-in to the use of AI by installing an AI-related plugin in your online profile.

Location

Any information you provide to us will be stored and processed on secure servers hosted in the United States and/or the United Kingdom. Our hosting provider is Vultr, so your data will be held in Vultr's secure data centers.

Marketing

If you consent, we may periodically contact you electronically to update/inform you about new or exciting developments relating to Notom or new products we create. You can manage your consent online in your profile at https://notom.app

We do not disclose, nor sell access to, your data to any third party for any marketing purposes besides what you may opt-in and consent to in your online profile.

Cookies

We use a small number of necessary cookies that do not require your consent: one to keep you signed in (your authenticated session), and one — named consent — that remembers your cookie choices.

If you agree via our cookie banner, we may also set:

  • Analytics cookiesPostHog, to understand how the product is used so we can improve it.
  • Advertising cookies — Google Ads, to measure how effective any ads we run are.

We do not set analytics or advertising cookies without your consent. You can accept, reject, or change your choices at any time using the "Manage cookies" link, and we honour Global Privacy Control (GPC) signals from your browser.

Contact

For any privacy questions or concerns please contact us at [email protected]

Changes to this policy

This policy may be updated from time to time. Any changes become effective at the time they are published.

We will not make changes that materially affect the privacy of your data without giving advance warning and/or the ability to opt in/out of the change.