Privacy

What we collect

If you create an account (Google sign-in or an email magic link — we never see or store a password): your email address, your name, and an optional profile photo.

What you upload: your prototype files, their version history, titles, and any context notes you write for reviewers.

Feedback on your work: notes and replies, each stored with the display name its author typed. Reviewers never create accounts — the name they enter is all we have of them, and it’s stored in their own browser for next time.

View records: when someone opens a share link, we record the display name they entered and when — that’s the “Viewed by Maya · 2h ago” on your dashboard.

Service logs: standard technical logs (like IP addresses in server logs) kept briefly by our hosting providers for security and debugging. We run no advertising trackers and our only cookies keep you signed in. We count page views with a cookieless analytics service that can’t identify you.

How it’s used

To run the product: host your prototypes, show notes to you and your reviewers, email you when feedback arrives, and show link previews when you share. That’s it. We never sell your data, and we never use your prototypes or notes for anything other than showing them to the people you shared them with.

Who can see your work

Prototypes are private by default — only people with your share link can open one. You can disable or regenerate any link at any time, which cuts off access instantly. If you use the Claude connector, it acts as your signed-in account and can create prototypes and read the notes on them.

Where it lives

Your data is processed by our infrastructure providers: Supabase (database, file storage, and sign-in; hosted in the United States), Vercel (application hosting), Resend (email delivery), Google (only if you sign in with Google), and Stripe (payment processing if you buy Pro — we never see or store your card number; Stripe handles it). They process it on our behalf and don’t use it for their own purposes.

How long we keep it

Your prototypes and notes stay until you delete them — deleting a prototype permanently removes its files, versions, notes, and view records. Uploads that were never shared or claimed are cleared after 30 days. Free accounts inactive for 12 months get an email and a grace period before cleanup.

Deleting everything

You can delete any prototype from your dashboard. To delete your whole account and everything in it, email support@protonote.io and it will be done within 30 days.

Your rights

You can ask for a copy of everything we hold about you, correct it, or have it deleted — email support@protonote.io.

Questions

Email support@protonote.io. If this policy changes in a way that matters, we’ll note it here with a new date.