Privacy policy
Last updated: June 2, 2026
This policy describes what personal data Notibo collects, why we process it, and what rights you have. Notibo is operated by Ba-Ali Tech v/Farhad Ba-Ali (Danish CVR 43795481).
1. Data controller
Ba-Ali Tech v/Farhad Ba-Ali CVR: 43795481 Fyrreparken 74, 3. tv, 5240 Odense NØ, Denmark Contact: support@notibo.net
2. What data we collect
Account data: email, password (hashed), account creation date. Content you create or upload: audio recordings, uploaded documents (PDF, PowerPoint and Word), transcripts, AI-generated notes (summary, key points, action items, flashcards), and any edits you make. Usage data: your language preference, minutes of recording used per month (to enforce the Free plan limit). Payment data: handled by Lemon Squeezy (our Merchant of Record). We only receive your subscription status, not card details.
3. Why we process your data
We process your personal data to: deliver the Notibo service (transcription, AI notes), manage your account and subscription, send confirmation and support emails, and comply with legal obligations (bookkeeping, GDPR requests). Our legal basis is primarily the performance of the contract with you (GDPR Art. 6(1)(b)) and legitimate interests in operating a secure service.
4. Third parties (processors)
To deliver the service we share selected data with these providers, all bound by confidentiality: • Supabase (US / EU) — database, authentication and audio storage. • Lemon Squeezy (US) — payment processing as Merchant of Record. • Deepgram (US) — transcription of Danish recordings. • Groq (US) — transcription of English recordings (Whisper-based). • Google Gemini (US / EU) — generating AI notes and flashcards from transcripts and from uploaded documents. • Simply.com (Denmark) — sending system emails (confirmation, support). • Vercel (US) — hosting notibo.net. • Unsplash (US) — image CDN for marketing photos on the homepage (no personal data). All processors outside the EEA operate under approved mechanisms (Standard Contractual Clauses).
5. Retention
Account data and content are retained as long as your account is active. If you delete your account or request deletion, we remove all your recordings, documents, transcripts, notes, and flashcards within 30 days. Audio and document files are automatically deleted from storage once processing is complete (transcription and AI notes generated) — we only keep the generated text and your flashcards. You can delete all your data (recordings and documents) at any time under Settings → Privacy & data → Delete all data, which removes both the database rows and any remaining files. Payment records are retained by Lemon Squeezy in accordance with Danish bookkeeping law (typically 5 years).
6. Your rights
You have the right to: access the data we hold about you, receive your data in a usable format (portability), have inaccurate data corrected, have your data deleted ("right to be forgotten"), restrict or object to processing, and lodge a complaint with the Danish Data Protection Agency (datatilsynet.dk). We've built export functionality into Notibo: go to Settings → Privacy & data → Export my data, and you'll get all your recordings and documents — including transcripts, notes, and flashcards — as readable Markdown files in a ZIP. Deleting all data or your account can also be initiated from the same menu.
7. Cookies
Notibo only uses strictly necessary cookies: authentication (Supabase session) and your language preference. We do not use tracking cookies, third-party analytics, or advertising pixels.
8. Changes
If we materially change this policy, we'll update the date at the top and notify you by email. Minor editorial corrections may happen without notice.
9. Contact
Questions about this policy or your rights? Email support@notibo.net — we reply within 24 hours on business days.