Privacy Policy
Effective Date: May 25, 2026 · Last Updated: May 25, 2026
Noted is a product of StayDirect Technologies LLC.
This Privacy Policy explains how StayDirect Technologies LLC ("Company," "we," "us," or "our") collects, uses, shares, and protects information when you use the Noted application and related services ("Service"). By using the Service, you agree to the practices described in this Policy.
1. Information We Collect
1.1 Information You Provide Directly
| Data | How It's Collected |
|---|---|
| Phone number | Required at registration; used to identify your inbound SMS messages |
| Email address | Required at registration; used for account communications |
| Gift clues | Text and voice messages you send to the Noted number describing gift ideas |
| People and relationships | Names and relationships of people you're shopping for (e.g., "my sister") |
| Occasions | Dates and event types you mention (e.g., "her birthday in December") |
| Payment information | Collected by Stripe at checkout — we never see or store your full card number |
1.2 Information Collected Automatically
| Data | Source |
|---|---|
| Subscription status and plan | Generated when you subscribe |
| Usage events | Pages visited, features used, actions taken within the app |
| Device and browser information | Browser type, OS, IP address |
| Cookies and similar tracking | Session cookies for authentication; analytics cookies (see Section 4) |
1.3 Voice Note Data
If you send a voice note (audio MMS), the audio file is temporarily fetched from Twilio and transcribed using OpenAI's Whisper service. The transcribed text is then processed like any other clue. We do not store the raw audio file.
2. How We Use Your Information
We use the information we collect to:
- Provide the Service — identify you from inbound SMS, parse your clues, generate gift recommendations
- Communicate with you — send SMS responses, recommendations, occasion reminders, and account notifications
- Process payments — manage subscriptions and billing via Stripe
- Improve the Service — analyze usage patterns to understand how the product is used and where it can be improved
- Prevent abuse — detect and block fraudulent or abusive activity
- Comply with legal obligations — respond to lawful requests from authorities
3. Information We Share
We do not sell your personal information to data brokers.
3.1 Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Twilio | SMS delivery and reception | Your phone number, message content |
| Stripe | Payment processing | Email, billing details |
| Supabase | Database hosting | All account and clue data |
| OpenAI | Voice note transcription | Audio content of voice notes only |
| Anthropic | AI gift recommendations and message parsing | Clue text, person/occasion context |
These providers are contractually bound to use your data only for the services they provide to us.
3.2 Analytics and Advertising Partners
We use analytics tools to understand how the Service is used. Analytics providers may receive:
- Pages and features you interact with
- Device and browser information
- Anonymized usage events
This data may also be used to serve you relevant advertising. You may opt out of analytics tracking through your browser's cookie settings or via a preference we will add to the account settings page. We do not share the content of your gift clues or the names of the people you're shopping for with analytics or advertising partners.
3.3 Legal Requirements
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, safety, or property of our users or the public.
3.4 Business Transfers
If StayDirect Technologies LLC is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
4. Cookies and Tracking
We use cookies and similar technologies for:
- Authentication — keeping you logged in (session cookies, required)
- Analytics — understanding usage patterns (may be opted out)
You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.
5. Your Privacy Rights (CCPA — California Residents)
If you are a California resident, you have the following rights under the CCPA:
- Right to Know — request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to Delete — request deletion of your personal information, subject to certain exceptions
- Right to Opt Out of Sale/Sharing — you may opt out of data sharing with analytics and advertising partners
- Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights
To exercise any of these rights, contact us at privacy @ i-noted dot com. We will respond to verified requests within 45 days.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data (phone, email, plan) | Retained while account is active |
| Gift clues, people, occasions, recommendations | Retained while account is active |
| Payment records | Retained per Stripe's policies and tax law requirements |
| All of the above after account deletion | Deleted within 30 days of account deletion |
| Analytics data | Governed by the analytics provider's retention policy |
7. Data Security
We implement industry-standard measures to protect your data, including:
- Encrypted connections (HTTPS/TLS)
- Access controls limiting who on our team can access production data
- Twilio webhook signature validation to prevent spoofed SMS events
No system is perfectly secure. If we become aware of a breach that affects your data, we will notify you as required by applicable law.
8. Children's Privacy
9. Third-Party Links
10. Changes to This Policy
11. Contact Us
StayDirect Technologies LLC
Email: privacy at i-noted dot com
For California residents submitting CCPA requests, include "CCPA Request" in the subject line.