Your work stays yours.

1. Who we are

Crate Notes ("Crate", "we", "us") is a notes application operated at notes.trycrate.net, part of the Crate ecosystem. This policy explains what we collect, why, and the choices you have. For privacy questions or requests, contact privacy@trycrate.net.

2. Information we collect

Account information: when you sign in, our authentication provider (Clerk) supplies your email address and a user identifier. We store these to identify your account.

Your content: the notes, pages, comments, attachments, and settings you create. This is stored so we can show it back to you and sync it across your devices.

Usage and technical data: basic request logs and, for security features like rate limiting, a coarse record of request counts. Share links record view counts and timestamps.

We do not collect payment card details ourselves; if and when paid team workspaces launch, billing is handled by a third-party processor.

3. How we use it

To provide the service: store and display your notes, power search, sharing, comments, version history, and the AI features you choose to use.

To secure the service: authenticate requests, enforce owner-scoping, rate-limit abuse, and protect against unauthorized access.

We do not use your note content for advertising, and we do not sell it.

4. AI features

AI features (summaries, study sets, the lecture/meeting recorder, and edit-selection actions) send the relevant text — the note or the selection you act on — to our AI provider (Anthropic) to generate a result. The recorder transcribes audio in your own browser; the audio itself is not uploaded. AI providers process this text to return your result and, per their terms, do not use it to train their models. AI features are optional.

5. Sharing and disclosure

We share your content only as you direct — for example, when you create a share link or add someone to a workspace. We use a small set of infrastructure providers (hosting, database, file storage, authentication, and AI) that process data on our behalf under their own agreements. We may disclose information if required by law, or to protect the rights and safety of our users and the service.

6. Data retention & deletion

We keep your content while your account is active. Deleting a note moves it to Trash, from which it is permanently removed after 30 days. You can delete your entire account and its data at any time from Settings → Account; this removes your notes, attachments, comments, share links, and API keys from our systems.

7. Your rights

You can access and export your data, correct it by editing, and delete it — all from within the app. Depending on where you live, you may have additional rights (such as under the GDPR or CCPA), including the right to object to or restrict certain processing. To exercise these or ask for a Data Processing Agreement, contact privacy@trycrate.net.

8. Security

Data is encrypted in transit (HTTPS). Access is owner-scoped on every server request. Attachments are stored in access-controlled object storage and served via short-lived, signed URLs. No system is perfectly secure, but we design for least-privilege and isolation.

9. Cookies

We use strictly necessary cookies for authentication and to remember preferences like your theme. We do not use third-party advertising or tracking cookies.

10. Changes

We may update this policy as the product evolves. Material changes will be reflected here with a new effective date.