Privacy Policy
Last updated: October 2026 · Notedigit is self-hosted software sold by Well Digit ("we", "us").
What we collect
As the seller of the license: your name and email address, the messages you send us, the account we grant source repository access to, and the license purchase itself. Payment data is handled by Paddle, our payment processor; we do not store card details.
What stays on your own server
Notedigit runs on your VPS, so the data it processes is stored there, under your control, and is not sent to us: account data (names, email addresses, password hashes, two-factor and passkey credentials), team data (member roles, invitations, per-repository user assignments), and repository configuration (repository addresses, branches, IP allowlists, and the read-only deploy key of each repository).
Audit data: for every MCP session and tool call your instance records the client, the authenticated user, IP address, tool name, arguments, status, and duration, so repository owners can see exactly what an AI assistant read. That log lives on your server.
What we deliberately do not keep
Nothing from your instance is sent to us. Your server clones a repository only while assistants are reading it and deletes the clone after 15 minutes without activity. Product telemetry that would carry search queries or note paths is disabled.
How your instance protects what it keeps
Repository addresses, deploy keys, IP allowlists, and audit-log arguments are encrypted at rest under two independent keys, so a database copy alone cannot read them. Deploy keys are read-only on your git host. Access to a repository over MCP requires OAuth 2.1 sign-in and an explicit per-user assignment, and requests are rate-limited per token and IP.
How we use your data
To sell and support the license: process the purchase, grant and manage source repository access, answer your messages, and help you install Notedigit. We do not sell personal data, and we never receive your notes or audit logs, so we cannot use them to train models.
Third parties
Paddle processes payments as merchant of record. Google processes website analytics for us, only if you accept analytics cookies. Your Notedigit server contacts only your git host, with the read-only deploy key you approved. MCP clients such as Claude receive the note content they request through the repository's read-only tools; their handling of that content is governed by their own policies.
Retention and deletion
Data on your Notedigit instance is retained and deleted by you, on your server. We keep purchase records as long as the law requires. To have the rest of what we hold about you deleted, contact us at contact@welldigit.com.
Contact
Questions about this policy: contact@welldigit.com.