Privacy Policy

Last updated: April 3, 2026

This Privacy Policy explains how Beta Acid, Inc. ("Beta Acid," "we," "us," or "our") collects, uses, and discloses information when you use Notework, including our website, authenticated product, help center, blog, and related services (collectively, the "Services").

1. Information We Collect

1.1 Information You Provide

• Account details, such as name, email address, and login credentials.
• Workspace and profile settings.
• Content you create or upload, including pages, collection entries, comments, attachments, icons, and metadata.
• Content you import, for example Notion import or CSV uploads.
• Information you submit to support or through help/contact flows.
• Billing contact details, where provided.

1.2 Information We Collect Automatically

• Basic usage and diagnostic data, for example page requests, feature usage, and error events.
• Device and browser information, IP address, and approximate region.
• Security and abuse-prevention signals, including authentication and access logs.

1.3 Information from Third Parties

• Authentication providers, for example Google OAuth, when you choose those login options.
• Payment processors, for example Stripe, for billing status and payment events.
• Service providers we use for hosting, infrastructure, analytics, error monitoring, and customer support.

2. How We Use Information

We use information to:

• Provide, secure, and improve the Services.
• Authenticate users and enforce workspace permissions.
• Store, render, index, and retrieve your content, including across pages, projects, and collections.
• Process imports, exports, file uploads, sharing actions, and public page publishing.
• Operate subscriptions, trials, invoicing, and plan entitlements.
• Detect abuse, fraud, and unauthorized access.
• Respond to support requests and product inquiries.
• Comply with legal obligations and enforce our terms.

3. Legal Bases (Where Applicable)

Where required by law, we process personal data based on one or more of the following: performance of a contract, legitimate interests, legal obligations, and your consent.

4. Sharing and Disclosure

We do not sell your personal information. We may disclose information:

• To service providers that process data on our behalf.
• To your workspace administrators and collaborators, based on your workspace role and sharing permissions.
• When you publish content publicly, for the information you choose to make public.
• To comply with law, legal process, or enforceable governmental requests.
• To protect rights, security, and integrity of users, Beta Acid, and the Services.
• In connection with a merger, acquisition, financing, or asset sale.

5. Data Storage and Security

We use third-party infrastructure and cloud service providers to host and process data. We apply reasonable technical and organizational safeguards designed to protect data, including access controls, role-based authorization, and tenant/workspace isolation. No method of transmission or storage is completely secure.

6. Retention

We retain personal data for as long as needed to provide the Services, satisfy legal obligations, resolve disputes, and enforce agreements. Workspace content may remain available until deleted by users or workspace administrators, subject to backup and operational retention windows.

7. Your Choices and Rights

• You can update profile and workspace information in product settings.
• You can control sharing permissions for pages and workspace content.
• You can export content using available product export functionality.
• You can request account or workspace deletion, subject to verification and legal requirements.

Depending on your location, you may have additional rights, for example access, correction, deletion, objection, restriction, portability, and appeal. We will process requests as required by applicable law.

8. International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border data transfers.

9. Children's Privacy

Notework is not directed to children under 13, or higher age where required by local law. We do not knowingly collect personal information from children in violation of applicable law.

10. Notework AI Features

Certain Notework features (collectively "Notework AI") use OpenAI's API to process workspace content and generate AI-assisted responses. This section describes how data is handled when you use these features.

Which features use AI:

• Collection summaries (Team plan only)
• Create from pasted text (Team plan only)
• Slack thread capture (Team plan only, requires Slack integration)

What data is sent to OpenAI:

• Collection metadata: collection name, property names and option values
• Entry titles and property values (not full page body content)
• Pasted text that you explicitly submit for AI processing
• Slack thread messages from threads you explicitly capture

What data is NOT sent to OpenAI:

• Full page body content (only titles and structured properties)
• Payment or billing information
• User passwords or authentication credentials

Data retention and OpenAI policy:

• We configure all AI requests with store: false, which instructs OpenAI not to use submitted content to train its models
• OpenAI does not retain input data beyond the duration required to return a response
• You can review OpenAI's data usage policies at openai.com/policies

Notework AI is opt-in:

• AI features are only available on the Team plan and are explicitly triggered by user action
• AI never writes or creates content in your workspace without your review and explicit confirmation

Usage data:

• We log AI request metadata (feature name, approximate token count, timestamp) in your workspace for usage tracking and billing purposes
• AI request logs may be reviewed by workspace admins in the billing and usage settings

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date. Material changes may also be communicated in-product or by email.

12. Contact

For privacy questions or requests, contact us through the support channels listed in the help center.