Arbor NotaHome

Privacy Policy

Last updated: May 17, 2026

Our commitment

Arbor Nota is built around a simple promise: we do not sell, rent, or give away your data. We comply with all applicable data-protection laws including the GDPR (EU/UK), CCPA/CPRA (California), and PIPEDA (Canada).

What we collect

  • Account data: email, display name, hashed password, email-verification status.
  • Bookmarks & folders: the URLs, titles, descriptions, tags, and folder structure you save. Bookmarks may live inside folders or at the root of a workspace.
  • Page titles fetched from URLs: when you add a bookmark and leave the title blank, we make a single server-side request to the URL you provided to read its <title> tag and pre-fill the field. We do not store the page body, do not follow links on the page, and cap the response at 256 KB. You can disable this by always typing a title manually.
  • Recent searches: the last few search queries you ran inside the app, stored against your account so the search palette can show "Recent" suggestions. You can clear them at any time from the search palette.
  • Organization data: organization name, members, roles, seat counts, and per-bookmark "allow sending outside the organization" flags (when you use a team workspace).
  • Billing metadata: customer ID, subscription status, invoices. Card numbers are processed by Stripe and never stored on our servers.
  • Operational logs: minimal request logs needed to keep the service running and secure.

What we do not do

  • We do not sell your data to anyone.
  • We do not share your data with advertisers or data brokers.
  • We do not run third-party advertising or behavioural tracking on the app.
  • We do not store the contents of the pages you bookmark — only the URL, your title and your description.
  • We do not share bookmarks outside your organization unless you explicitly mark a bookmark as "allowed to be sent outside the organization".

Sub-processors

We use a small set of vetted providers to deliver the service:

  • Supabase — database, authentication, file storage.
  • Stripe — payment processing and invoicing.
  • Resend — transactional email (sign-up, verification, billing, invites).
  • Cloudflare — application hosting and edge delivery.
  • One Tree Planted — reforestation partner (no personal data shared).

Your rights

You can access, export, correct, or delete your data at any time from Settings, or by emailing privacy@arbornota.app. Deleting your account permanently removes your bookmarks, folders, recent searches, and profile.

Cookies & tracking

We use only essential cookies and local storage to keep you signed in and to remember your workspace preferences. No third-party analytics or ad trackers.

Contact

Questions? privacy@arbornota.app