Privacy Policy

1. Who controls your information

Husena LLC is the operator and controller responsible for Jotmor:

Contact privacy@jotmor.com for privacy questions or requests. You may appeal a denied request by replying with “Privacy appeal” in the subject line.

2. Scope and eligibility

This Policy applies to the Jotmor website, applications, APIs, account services, private note and file storage, media processing, and search. It does not govern third-party services you use independently.

Jotmor is for adults aged 18 and older. We do not knowingly collect personal information from children. If you believe a minor has provided information, contact us so we can investigate and delete it where appropriate.

3. Information we collect

Account and profile information

• Email address, account identifier, display name, plan and storage limits.
• Authentication identifiers and status from Amazon Cognito. We do not receive or store your Cognito password or authenticator secret.
• Settings, device registrations, account-creation and deletion timestamps.

Your notes, files, and derived content

• Note titles, bodies, revisions, timestamps, organization, and attachments.
• Original filenames, declared and detected file types, sizes, hashes, image dimensions, media duration, thumbnails, and converted playback files.
• OCR text, transcripts, timestamps, visible text, descriptions, summaries, chapters, page references, and processing status or errors.
• Numeric embeddings, content hashes, topics, note connections, search chunks, relevance scores, and similar derived information used to organize and retrieve your content.

Search and feature activity

• Search queries, filters, result candidate identifiers, ranking results, and fallbacks.
• Recently opened or edited items and user feedback on organization or connections.
• Upload, processing, export, deletion, and retry activity.

Subscription and transaction information

• Selected plan and billing interval, Polar customer, subscription, order, and product identifiers, subscription status and renewal dates, currency, transaction amount, refund status, and checkout or portal activity.
• Polar and its payment processors collect billing addresses, tax information, and payment credentials directly. Jotmor does not receive or store complete card numbers or card security codes.

Device, network, security, and support information

• Browser family, capability tier, IP address, user-agent, request time, request identifiers, and limited server and access logs.
• Authentication events, rate-limit and WAF events, malware-scan status, service errors, and audit information needed to secure and operate Jotmor.
• Messages and attachments you send to support, privacy, legal, or security addresses and our responses.

Information stored on your device

Jotmor uses essential browser storage for authentication, security, user settings, and feature state. We do not currently use advertising cookies, cross-site tracking, or behavioral analytics.

4. How and why we use information

• Provide the contract: authenticate you; save, sync, display, export, and delete content; process uploads; and operate search and organization.
• Operate AI-assisted features: create OCR, transcripts, summaries, descriptions, embeddings, connections, and rankings for your account.
• Protect legitimate interests: prevent fraud and abuse, screen malware, investigate incidents, debug errors, improve reliability and usability, enforce limits, and defend legal claims.
• Comply with legal obligations: respond to valid legal process, exercise rights, maintain required records, and provide notices.
• Communicate about account, security, support, policy, and service changes.

Where laws such as the GDPR or UK GDPR require a lawful basis, we rely on performance of our contract, our legitimate interests described above, legal obligations, protection of vital interests in exceptional circumstances, or consent for an optional use that specifically asks for it. You may withdraw consent for an optional use without affecting earlier lawful processing.

5. AI, model providers, and training

Jotmor uses Amazon Bedrock services, including multimodal embedding, data automation, and language-model processing, to analyze and retrieve your content. We send only the content and metadata reasonably needed for the selected operation.

We do not sell User Content or use it to train a generalized or publicly available model. We will not begin generalized model training with your content without a separate affirmative opt-in. We may use aggregated or deidentified operational statistics that are not reasonably linkable to you to understand and improve service performance.

6. When we disclose information

We disclose information only as described below:

• Service providers. Vendors process information for cloud hosting, storage, databases, authentication, email, malware screening, media conversion, AI processing, monitoring, and support under contractual and access restrictions. See our Subprocessor List.
• Payments. Polar acts as merchant of record and processes checkout, subscription administration, taxes, invoices, refunds, and chargebacks. Polar may engage Stripe and other payment processors and shares transaction status and identifiers with us so we can provide the purchased plan.
• Legal and safety. We may preserve or disclose information when reasonably necessary to comply with law or valid legal process, protect rights and safety, investigate fraud or security issues, or enforce agreements. We may challenge overbroad requests where appropriate.
• Business transactions. Information may be reviewed or transferred in a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and any required notice.
• At your direction. We disclose information when you ask or provide specific authorization.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. We do not knowingly sell or share personal information of minors.

7. International processing

Husena is based in the United States, and Jotmor primarily processes and stores information in the United States. If you use Jotmor elsewhere, your information will be transferred to jurisdictions whose laws may differ from yours. Where required, we use recognized contractual safeguards or another lawful transfer mechanism and make information about those safeguards available on request.

8. Retention

We retain information only as reasonably needed for the Service, security, legal obligations, dispute resolution, and the purposes described here. The current operational schedule is:

• Uncompleted incoming uploads: approximately 24 hours.
• Internal AI/media processing outputs: approximately 7 days.
• Ready data-export packages: approximately 7 days.
• Older note revisions, while retaining the latest revision: approximately 90 days.
• Application logs: approximately 30 days.
• Web, S3, and CloudFront access logs: approximately 90 days.
• Individually deleted notes and files: hidden promptly and normally purged after approximately 30 days.
• Deleted accounts: disabled promptly and normally purged after approximately 30 days.
• Noncurrent object versions in the development environment: approximately 30 days.
• Database and disaster-recovery backups: until their configured backup lifecycle expires.
• Minimal policy-acceptance evidence: up to 7 years after account closure for fraud prevention, contract records, and legal claims.
• Minimal subscription, order, refund, and tax-reconciliation records: generally up to 7 years after the transaction or account closure to meet accounting, tax, fraud-prevention, and legal-defense obligations.
• Webhook delivery identifiers and event metadata: approximately 90 days.

Deletion may be delayed for legal hold, security investigation, technical recovery, or a mandatory retention duty. Data in backups is isolated from normal use and expires or is overwritten through the applicable lifecycle.

9. Your choices and rights

Depending on where you live, you may have rights to know, access, correct, delete, restrict, object, obtain a portable copy, withdraw consent, opt out of certain processing, or appeal a decision. Jotmor extends access, export, correction, and deletion tools broadly even when a particular law does not require them.

• Review or edit notes, files, and settings in the Service.
• Use “Export my data” to request a portable archive.
• Use “Delete account” to disable the account and begin deletion.
• Email privacy@jotmor.com for requests not available in-product.

We may verify your identity and authority before acting, ask for information reasonably needed to locate records, deny requests that are fraudulent, excessive, technically infeasible, or lawfully exempt, and retain evidence of the request. We aim to answer verified requests within 30 days and will explain any lawful extension or denial. Authorized agents must provide proof of authority. You may complain to your local privacy regulator and will not be discriminated against for exercising a right.

10. Security

We use measures designed to protect information, including encryption in transit and at rest, private storage, access controls, separated service roles, multi-factor authentication capability, rate limiting, malware screening, logging, backups, and monitoring. These measures reduce risk but cannot guarantee absolute security. See Security for more information and responsible-disclosure instructions.

11. Changes to this Policy

We may update this Policy as the Service, providers, or law changes. We will publish an effective date and plain-language change summary. Contact, formatting, clarification, and processor-list updates generally do not require renewed agreement. We will provide reasonable advance notice and request renewed acknowledgment or agreement before a material change where appropriate or required.

12. Contact and complaints

Email privacy@jotmor.com or write to:

If you are not satisfied with our response, reply with “Privacy appeal.” You may also contact the privacy or consumer-protection authority where you live.