Privacy Policy

Last updated: 21 Jul 2026

This Privacy Policy explains how NoteClaw ("we", "us", "our") collects, uses, and shares your information when you use our service at noteclaw.cc.

1. What We Collect

Account data Email address and password hash when you sign up.

Connected channel identifiers

• Telegram: your Telegram user ID, chat ID, username, and display name.
• LINE: your LINE user ID and display name (the display name is retrieved from LINE's profile API when you link your account).

Message content The text, images, and URLs you send through your connected channel. This content is stored so we can organize and retrieve it for you.

Service interaction data We may collect information about how you use the service, including searches, questions, AI-generated responses, and related workspace interactions, to operate, maintain, and improve the service.

Feedback submissions If you submit feedback through the app, we may collect your account email, feedback content, page URL, and technical information such as your IP address.

2. How We Use Your Data

• To provide the core service: ingesting, classifying, and organizing your messages.
• To send event reminders via your linked Telegram account. (LINE is not currently used for reminders.)
• To process content with AI: content you send us, upload, or ask the service to process may be sent to a third-party AI provider (see §4) to provide classification, organization, search, question answering, embeddings, and related features.
• To respond to feedback you submit.

We do not use your data for advertising.

3. Legal Basis for Processing

Hong Kong (Personal Data (Privacy) Ordinance) As our primary jurisdiction, we handle your data in accordance with the PDPO's Data Protection Principles:

• Purpose and manner of collection — we only collect data described in §1, collected lawfully and fairly, and directly relevant to providing the Service.
• Accuracy and retention — we take reasonable steps to keep your data accurate and do not keep it longer than necessary (see §5).
• Use of data — we use your data only for the purposes stated in §2, or a directly related purpose, unless you consent otherwise.
• Security — see §6.
• Openness — this policy sets out our practices, including what data we hold and how to access it.
• Access and correction — you may request access to, or correction of, your personal data at any time (see §7).

Taiwan (Personal Data Protection Act) For users in Taiwan, at the point of collection we notify you of: our identity as data controller, the purpose of collection, the categories of data collected, the period/area/recipients of use, and your rights under the PDPA (access, correction, duplication, deletion, and the right to stop collection, processing, or use of your data). Providing this data is voluntary, but declining may mean we cannot provide the Service to you.

Other jurisdictions (e.g. GDPR) If you are in the European Economic Area, we process your personal data under the following legal bases:

• Contract — processing necessary to deliver the service you signed up for.
• Legitimate interests — improving retrieval quality via interaction logs; preventing fraud and abuse.

4. Third-Party Processors

We share data with the following processors to operate the service:

Cross-border transfer. As shown above, your data is processed by providers located outside Hong Kong and Taiwan (primarily the United States, alongside other regions where our channel and AI providers operate). By using the Service, you acknowledge and consent to this transfer. We select providers that maintain reasonable security standards, but no transfer mechanism eliminates all risk of data being subject to a foreign jurisdiction's laws.

We do not sell your data to any third party.

5. Data Retention

• Messages and documents are retained as long as your account is active.
• Interaction logs are retained for 12 months.
• If you want your account or data deleted, or want an export of your data, you can request it by emailing us at admin@noteclaw.cc.
• We may retain certain records as reasonably necessary to operate the service, comply with legal obligations, resolve disputes, enforce our terms, or prevent abuse.

6. Data Security

• Row-level security policies ensure you can only access your own data.
• Webhook endpoints validate secret tokens to prevent unauthorized message injection.
• Passwords are hashed and never stored in plain text (handled by Supabase Auth).

No system is perfectly secure. If you discover a security vulnerability, please contact us before public disclosure.

7. Your Rights

Hong Kong users (PDPO) You have the right to:

• Request access to the personal data we hold about you (we may charge a reasonable fee to cover the cost of complying).
• Request correction of inaccurate personal data.

Taiwan users (PDPA) You have the right to:

• Request access to, or a copy of, your personal data.
• Request correction of your personal data.
• Request deletion of your personal data.
• Request that we stop collecting, processing, or using your personal data.

All users Regardless of jurisdiction, you may also:

• Request account deletion.
• Request an export of the data associated with your account.

To exercise any of these rights, email us at admin@noteclaw.cc.

8. Children

NoteClaw is not directed at, and does not knowingly collect personal data from, individuals under the age of 18. If you are under 18, please do not use the Service or provide us with any personal data. If we become aware that we have collected personal data from someone under 18, we will delete it promptly.

9. Changes to This Policy

We will post material changes on this page with an updated "Last updated" date. Where practical, we will notify you by email. Continued use of the service after the effective date constitutes your acceptance of the revised policy.

10. Contact

Noteclaw Email: admin@noteclaw.cc