OtterNote LogoOtterNote

    Privacy Policy

    Last Updated: June 18, 2025

    Summary

    We respect your privacy and are committed to protecting your personal information. Key points:

    • Paid Users: Your content stays private and isn't used to train our AI
    • Free Users: Content may be used (anonymized) to improve our AI, but you can opt out
    • Your Data: You can export it anytime and we use strong security measures
    • No Selling: We never sell your personal information to third parties
    • Control: You can access, correct, or delete your data

    StudyDens Inc or its affiliates (collectively, "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our web-based AI reading companion, OtterNote, that allows users to upload PDF documents and interact with an AI assistant to gain insights and understand content more deeply.

    1. Information We Collect

    We collect the following types of information:

    a. Information You Provide

    • Account Information: When you sign up, we may collect your name, email address, and password.
    • Uploaded Content: When you upload PDFs or interact with the AI, we store the content to provide and improve our services.
    • Communication: If you contact us for support, we may collect your contact information and the contents of your message.

    b. Automatically Collected Information

    • Usage Data: We collect information about your interactions with the Service, such as pages visited, features used, and time spent.
    • Device and Log Data: We may collect information such as IP address, browser type, device type, operating system, and access times.
    • Cookies and Tracking Technologies: We use cookies and similar technologies to improve your experience. You can manage cookie preferences through your browser settings.

    2. How We Use Your Information

    We use your information to:

    • Provide and operate the Service
    • Analyze usage to improve performance and features
    • Personalize your experience
    • Communicate with you regarding updates, support, and promotions (only if you opt in)
    • Comply with legal obligations

    Content Usage by Subscription Type:

    Paid Subscribers: Your uploaded PDFs and AI interaction data will not be used to train or improve our AI models. This content is kept private and is only accessed by our systems to provide the service directly to you, or by our technical support team with your explicit consent when troubleshooting issues.

    Free Tier Users: Uploaded content and AI interactions may be used in anonymized and aggregated form to improve our services and AI models. "Anonymized" means we remove personally identifying information, document titles, and other direct identifiers. "Aggregated" means we combine data from multiple users to identify patterns without focusing on individual usage. You may contact us at [email protected] to opt out of having your content used for AI training purposes.

    3. How We Share Your Information

    We do not sell or rent your personal information. We may share your information with:

    • Service Providers: Third parties who help us operate the Service (e.g., hosting providers, analytics tools) under confidentiality agreements
    • Legal Authorities: If required by law or to protect rights, safety, and property
    • Business Transfers: If we are involved in a merger, acquisition, or asset sale, with advance notice to affected users

    4. Data Storage and Security

    We implement reasonable security measures to protect your data, including:

    • Encryption of data in transit and at rest
    • Secure hosting infrastructure through reputable cloud providers
    • Access controls limiting who can view your data
    • Regular software updates and security patches

    As we grow, we are committed to implementing additional security measures and may engage third-party security assessments.

    However, no method of transmission over the internet is 100% secure. You are responsible for maintaining the security of your login credentials.

    Data Access and Usage:

    Paid Subscribers: Uploaded PDFs and AI interactions are encrypted and stored securely with restricted access. Your content is used solely to provide the service to you and will not be viewed by Company employees except when necessary for technical support with your explicit consent.

    Free Tier Users: Uploaded content is encrypted and stored securely, but may be accessed in an anonymized form to improve our services and AI capabilities.

    5. Data Retention

    We retain your personal data and uploaded content for as long as necessary to provide the Service and for legitimate business or legal purposes. Specifically:

    • Account Data: Retained while your account is active and for up to 2 years after account deletion for legal and business purposes
    • Uploaded Content: Retained while your account is active and deleted within 30 days of account termination (unless you export it first)
    • Usage Analytics: Anonymized usage data may be retained indefinitely to improve our services

    You may request deletion of your account and data at any time by contacting us at [email protected].

    6. Data Export and Portability

    You have the right to export your data at any time through your account dashboard. We provide data in common formats including:

    • Original uploaded PDFs
    • AI conversation history (in text format)
    • Account information (in JSON format)

    If your account is terminated, you will have 30 days to export your data before it may be permanently deleted.

    7. Your Rights and Choices

    Depending on your location, you may have the right to:

    • Access: Request a copy of the personal data we hold about you
    • Correction: Request correction of inaccurate or incomplete data
    • Deletion: Request deletion of your personal data (subject to legal retention requirements)
    • Portability: Export your data in common formats
    • Restriction: Object to or restrict certain data processing activities
    • Withdrawal: Withdraw consent for data processing where applicable
    • Complaint: File a complaint with a data protection authority

    To exercise your rights, contact us at [email protected]. We will respond to requests within 30 days.

    8. Children's Privacy

    Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

    9. Third-Party Links and Services

    Our Service may contain links to third-party sites or integrate with third-party services. We are not responsible for their privacy practices or content. We encourage you to review their privacy policies before sharing any information with them.

    10. International Users

    If you are accessing the Service from outside Canada, please be aware that your information may be transferred to and stored in Canada and other countries where our service providers operate. These countries may have different data protection laws than your jurisdiction. By using our Service, you consent to such transfers.

    11. Privacy Policy Updates

    We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by:

    • Posting the updated policy on our website with a new "Last Updated" date
    • Sending email notifications for significant changes that affect how we handle your data
    • Providing 30 days advance notice for changes that materially reduce your privacy rights

    Continued use of the Service after changes become effective means you accept the updated terms.

    12. Contact Us

    If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us at:

    Email: [email protected]

    Response Time: We aim to respond to all privacy-related inquiries within 30 days.