What we collect when you use CiNotes, which outside services touch your uploaded material to build your notes, and what we delete once your order is done.
Effective date: 7 September 2026
We collect your email, an optional Calculator ID, and whatever you upload. Your upload is sent to our CDN, to an AI provider (OpenRouter, routing to Google Gemini) to build your notes, and delivered by email through Resend. Stripe handles payment — we never see your card. After delivery, we delete your uploaded files and the entire working folder used to build your order. We keep order metadata (email, Calculator ID, charge amount, timestamps) but not the content of your notes. We've also enabled zero data retention (ZDR) on our OpenRouter account, which OpenRouter enforces with the Gemini models it routes to — so your document isn't logged, retained, or used to train models at any point in the pipeline, not just after we delete our own copy.
To build your notes, your uploaded PDF or text passes through a few systems along the way:
We do not send your uploaded material, email address, or Calculator ID to our website-analytics or advertising-measurement tools.
After your order is delivered — or if it fails for any reason — our system deletes your uploaded files from the CDN and deletes the entire working folder used to process your order. This happens on every code path, including failures, not just successful deliveries. The generated ZIP file itself isn't kept anywhere on our end. Keep the copies attached to your delivery email. We cannot retrieve a lost ZIP from our storage. If you still have your editable Your notes.html file, you can request a fresh build from that copy. This is on top of, not instead of, the zero data retention (ZDR) we've enabled on the AI leg (Section 2) — so retention is minimized end to end: nothing sticks around at the CDN, at the AI provider, or in our own working storage.
In our orders database, we keep: your email address, your Calculator ID, your Reference Code (an internal number identifying your order), the order's status, the amount charged, the Stripe payment intent ID, timestamps for when the order was placed and completed, our internal cost for processing it, and a pair of random keys used to generate activation files for your bundle. Those keys are not derived from anything about you or your calculator — we keep them because without them we could never issue you a replacement activation file or add a second calculator. For revisions, we also keep the collection’s included word and size allowance, added capacity, and build/payment status. These are counts and order metadata. We do not keep the content of your notes or PDFs.
The notes editor saves your original text, note titles and selected formats in this browser so you can recover them after a refresh. PDF files, their download links, your email and your Calculator ID are not saved in the draft. Draft text stays on your device until you choose to continue with an order. A saved draft can be recovered for 30 days after its last edit; an expired draft is removed when you next visit the editor. Clear this site's browser storage to remove the saved copy. On a shared device, other people using the same browser profile may be able to open your draft.
Your readable delivery preview contains your converted notes and is sent through Resend with your calculator files. Our working copy is deleted with the rest of the order. Downloaded previews remain on your device until you delete them. The editable file contains a collection-specific access credential for requesting revisions; keep it private.
Editing Your notes.html works locally. Use Save edited copy to keep changes on your device. When you request an update, the file sends your revised notes directly to CiNotes over HTTPS. The allowance check uses the text only during that request. A submitted build uses a temporary working folder; revisions do not go through our CDN or an AI provider. We delete that folder after delivery or failure. Unpaid revision checkouts expire after one hour; cancellation and expiry trigger deletion, with a recovery process for interrupted requests. Your email provider and our email delivery provider handle the delivered attachment as described above.
Stripe processes your payment directly. CiNotes never receives, sees, or stores your card number or other payment credentials.
We use Umami (cloud.umami.is) to see aggregate traffic to the site — for example, which pages get visited. We also use the Google Ads tag on marketing pages and checkout-success pages to measure whether an ad leads to a purchase. For a confirmed paid order, that tag receives the purchase amount, currency, and a random internal transaction ID so repeat page loads are not counted twice. It does not receive your email, Calculator ID, payment credentials, or uploaded material. We configure the tag for restricted data processing and disable ad-personalization signals.
Many CiNotes customers are students who may be under 18.
To ask what data we have on an order, or to request anything else related to your privacy, email support@cinotes.com.
We take reasonable steps to protect the data described above, including deleting your uploaded material as soon as it's no longer needed. No method of storage or transmission is perfectly secure, and we can't guarantee absolute security.
We may update this policy from time to time. If we do, we'll update the effective date above.
Questions about this policy? Email support@cinotes.com.