Privacy policy
Draft, under legal review. It may change before Noteva launches.
Last updated 25 October 2026
Noteva keeps what you choose to capture (recordings, screenshots, notes, files) in your account so you can find it later. This page says what Noteva collects today, why, where it goes and how long it is kept.
1. Who we are
Noteva is made by SyntaxEror, a company based in Tunisia. For any question or request about your data, write to [email protected].
[To be completed: the registered company name, registration number and postal address.]
2. What we collect
Your account: your email address and name, your password stored only as a one-way hash (or, if you sign in with SyntaxEror ID, the identifier, verified email and name it sends us), your language, time zone and plan.
What you capture or add: recordings (the sound of a tab, your microphone, your screen, your camera), voice notes, screenshots, files, notes and typed text, with the title and address of the page they came from, and the transcripts, summaries and titles made from them.
Services you choose to connect: Google Calendar events (read only), the Slack and Discord channels you opt in, and the sessions of the meeting notetaker you send.
Payments: the plan, amount, date, invoice number and payment reference from our payment provider. We never see your card details.
Support: the messages and attachments you send us and, only if you tick the box, your recent actions in the app.
Devices: for each signed-in browser extension, desktop app or phone, a label such as “Chrome on Windows” and a sign-in token; on Android, a notification token when notifications are on.
Usage analytics about Noteva’s own screens and buttons, described in “Usage analytics” below.
3. How we use it
To provide Noteva: keep your items, transcribe and summarize them, search them, and share the links you create.
To send the emails you ask for or that the service needs: sign-in and verification links, reminders, receipts.
To keep accounts and the service safe: rate limits, file safety checks on uploads, investigation of abuse.
To answer support requests, and to improve Noteva from usage analytics.
We do not sell your data and do not use it for advertising.
4. Transcription and AI
To transcribe a recording, we send its audio to one of the speech-to-text providers listed below, chosen automatically by availability; short voice notes may instead be transcribed on our own servers. Each provider processes the audio on our behalf only to return the transcript, may not use it to train its models (by contract or by the opt-out we set on our account), and we delete each job at the provider as soon as the transcript is back where the provider allows it.
To write titles and summaries, file items into groups, answer Ask and rephrase text, we send the text needed for the task (transcripts, notes, your question, the selected text and, for meetings, the attendees’ names and email addresses) to Anthropic’s Claude service, which returns the result to us. Anthropic processes this data on our behalf as a service provider.
Speech-to-text providers (processors): Groq, Inc. (United States; zero data retention), Speechmatics Ltd (United Kingdom, processing in the European Union; deleted after transcription, at most 7 days), Deepgram, Inc. (European Union endpoint; kept only while processing), Gladia SAS (France), Mistral AI (France, European Union servers; at most 30 days for abuse monitoring unless zero data retention applies), Microsoft Azure AI Speech (European Union region; not stored), ElevenLabs (United States) and AssemblyAI, Inc. (European Union endpoint). Transfers outside Tunisia and the European Union rely on the providers’ standard contractual clauses.
5. Where your data is kept
Our servers are hosted by netcup in Germany, and traffic to them passes through Cloudflare.
Backups are encrypted before they leave our server and are stored with Cloudflare.
Notifications on Android go through Google Firebase Cloud Messaging; in browsers, through the browser’s own push service. Payments go through our payment provider, syntaxEror Pay.
Some of these providers process data outside Tunisia. [To be completed with legal review: the safeguards for these transfers.]
6. Usage analytics
We record events about Noteva’s own interface: the screen, the button, the app version, the browser and operating system family, the kind of device, the language, the plan and the country, which Cloudflare derives from your IP address (an approximate location). These events never contain what you type, the content of web pages or your recordings.
Events from a signed-in account carry a pseudonymous code computed from your account with a secret key, not your account id or email. Your IP address is not stored with these events; it is kept for up to an hour only to limit abuse (rate limits). Raw events are kept for 90 days and aggregated counts for 25 months.
On the website, the desktop app, the Android app and the extension in Chrome, Edge, Brave and Opera, usage analytics are always on. In Firefox they stay off until you agree, and you can change your answer in the extension’s settings.
8. How long we keep it
Your items (recordings, transcripts, screenshots, notes, files): until you delete them or your account.
A deleted item is removed from our servers at once; our encrypted backups keep a copy for up to 63 days.
Uploads that never finished: 30 days. A data export file: 24 hours.
Usage analytics: 90 days for raw events, 25 months for aggregated counts.
Payment records: kept after an account is deleted, as explained on “Delete your data”. [Retention period to be confirmed with legal review.]
Server logs: kept in rotating files of limited size.
9. Your choices and rights
You can see and correct your account details in Settings, export everything you keep in Noteva (Settings › Account › Export) and delete single items or your whole account at any time.
For any other request, such as access to the data we hold about you or an objection, write to [email protected] from your account’s email address.
You can also contact your data protection authority: in Tunisia, the INPDP; in the European Union, the authority of your country.
10. Age
Noteva is for adults: you must be 18 or older to create an account or use it.
11. Recording other people
When you record a call or a meeting, you are responsible for telling the people in it and for getting their consent where the law requires it.
12. Security
Connections use HTTPS, passwords are stored as hashes, the extension keeps its sign-in token where web pages cannot read it, uploads go through a file safety check, and backups are encrypted.
13. Changes to this page
We will update this page and its date when our practices change. [To be completed with legal review: how important changes are announced.]