NovaNote Privacy Policy

Updated: October 3, 2024

Welcome to NovaNote, a product of Alpha Computing, Inc. (“we,” “us,” or “Alpha Computing”). We are committed to protecting your privacy and ensuring you have a positive experience while using our web and iOS applications (collectively, the “Services”). This Privacy Policy outlines how we collect, use, disclose, and safeguard your information. By using our Services, you agree to the terms of this Privacy Policy.

1. Information We Collect

Personal Information

We may collect the following personal information when you use our Services:

• Name
• Email Address
• Phone Number

User Data

• Audio Recordings: Audio files you upload for transcription and note structuring, which may include sensitive information such as health data.
• Transcripts and Notes: Text generated from your audio recordings.
• Usage Data: Information about your interactions with the Services, including timestamps, features used, and error reports.

Device Information

• Device ID: Collected for fraud prevention and system protection.
• Device Type and Operating System

Payment Information

• Subscription and Payment Data: Managed securely by third-party payment processors like Stripe and the Apple App Store. We do not store your payment card details.

2. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To transcribe audio and convert it into structured notes.
• Service Improvement: To analyze usage patterns and improve our Services.
• Communication: To send you updates, respond to inquiries, and provide customer support.
• Security: To detect and prevent fraud, spam, and other malicious activities.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Data Processing and Storage

Sensitive Information

• Processing: Audio recordings and transcripts may contain sensitive information, including health data. This data is processed in the cloud to deliver the Services.
• Storage: By default, we do not store your sensitive information on our servers. It is immediately deleted after processing unless you explicitly request us to store it.

Cloud Infrastructure

We utilize Amazon Web Services (AWS) for cloud computing and Virtual Private Cloud (VPC) infrastructure:

• Data Storage: Data may be temporarily stored and processed on AWS servers located in secure data centers.
• Security Measures: AWS provides advanced security features and compliance certifications to protect your data.

4. Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We use trusted third-party service providers to perform certain services on our behalf:

• Amazon Web Services (AWS): For cloud computing and infrastructure services.
• CloudFlare: For hosting and DNS services.
• Stripe: For payment processing.
• Apple App Store: For app distribution and subscription management.
• Gmail: For email support communications.
• OpenPhone: For phone support communications.

These service providers have access to your personal information only as necessary to perform their functions and are obligated to maintain its confidentiality.

Legal Obligations

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. Third-Party Services

Our Services may contain links to third-party websites or services that are not operated by us. We strongly advise you to review the Privacy Policy of every site you visit.

• Amazon Web Services (AWS): AWS Privacy Notice
• Stripe: Stripe Privacy Policy
• Apple: Apple Privacy Policy
• Google (Gmail): Google Privacy Policy
• OpenPhone: OpenPhone Privacy Policy
• CloudFlare: CloudFlare Privacy Policy

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

6. International Data Transfers

Your information, including personal data, may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Services, you consent to such transfers.

Our service providers, including AWS and CloudFlare, may store and process data in multiple countries. We ensure that appropriate safeguards are in place to protect your data in compliance with applicable laws.

7. Compliance with Laws

We are committed to complying with all applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

For Users in the European Economic Area (EEA)

Under the GDPR, you have the following rights:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your personal data under certain conditions.
• Right to Restrict Processing: You can request that we restrict the processing of your personal data.
• Right to Data Portability: You can request to transfer your data to another organization or directly to you.

For California Residents

Under the CCPA, you have the following rights:

• Right to Know: You can request disclosure of the categories and specific pieces of personal information collected about you.
• Right to Delete: You can request the deletion of your personal information.
• Right to Opt-Out: We do not sell personal information, but you have the right to opt-out of any future sale.

To exercise any of these rights, please contact us at [email protected].

8. Data Security

We prioritize the security of your data and implement the following measures:

• Encryption: We use end-to-end encryption (E2EE) and SSL protocols to protect data during transmission.
• Secure Servers: Our servers, including those hosted on AWS, are protected by advanced security technologies.
• Secure Deletion: Data is securely deleted from our servers when it is no longer needed for processing.

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

9. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.

10. User Rights and Choices

Access and Update

You can access and update your personal information by logging into your account or by contacting us at [email protected].

Opt-Out

• Marketing Communications: You may opt-out of receiving promotional emails by following the unsubscribe link in those emails or by contacting us.
• Data Processing: If you wish to opt-out of data processing, you may discontinue using the Services.

11. Children’s Privacy

Our Services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us at [email protected], and we will take steps to remove such information.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the “Updated” date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email (Preferred): [email protected]

• Mailing Address:

  Alpha Computing, Inc.

  c/o United States Corporation Agents, Inc.

  651 N. Broad Street, Suite 201

  Middletown, DE 19709

Your privacy is important to us, and we are committed to protecting your personal information and respecting your privacy rights.

By using NovaNote, you acknowledge that you have read and understand this Privacy Policy and agree to its terms.