Privacy Policy

This policy explains what information Koinote collects, why, how it is used and protected, and how you can control it.

Information We Collect

We collect only what is necessary to provide the service.

  • Account data: email, username, display name, and a hashed password
  • When you use social sign-in, the basic profile returned by Google or GitHub (email, username, avatar)
  • Content you create: document titles and bodies, folder structure, uploaded images
  • WeChat Official Account binding: AppID, encrypted AppSecret, and binding time
  • Share settings: share tokens and hashed access passwords
  • User feedback: feedback text, source page, and client details
  • Operational logs: request time, IP, and User-Agent, as needed for debugging and abuse prevention
  • First-party product metrics: completion times for registration, first document, first upload, first export, first MCP call, and checkout; at most one activity date per account per day; shared pages retain only an aggregate read count

What We Do Not Collect

There are no third-party advertising or behavioural analytics SDKs. We do not profile you for ad targeting, and we do not use your document content to train models. Product metrics never store document titles, bodies, search terms, imported filenames, or share-reader identities.

How We Use Information

Collected information is used only for the following.

  • Providing core features: saving and syncing documents, hosting images, generating share links, and creating WeChat drafts at your request
  • Authenticating you and maintaining your session
  • Diagnosing faults and preventing abuse or attacks
  • Understanding aggregate registration, first creation, upload, export, MCP, checkout conversion, and D1/D7/D30 retention
  • Responding when you contact us for support

Where Data Is Stored

Document bodies and account data live in our self-hosted PostgreSQL database. Images live in Cloudflare R2 and are served through our Worker — meaning storage credentials are never sent to the browser.

Third Parties

Running Koinote relies on a small number of infrastructure providers, each processing data only within its own role.

  • Cloudflare: CDN, Workers, and R2 object storage
  • Google and GitHub: identity verification, only if you choose to sign in with them
  • Stripe: membership payment processing, receiving the email, amount, currency, and payment identifiers needed for checkout
  • Feishu: optional internal payment notifications containing only the Koinote user ID, amount, currency, and order identifiers — never email addresses or document content
  • AI cover model provider: receives the cover prompt you enter only when you generate a WeChat cover; it never receives the Official Account AppSecret or article body

Retention and Deletion

Documents first enter a 30-day trash, where content, versions, images, and storage usage remain. After permanent deletion or expiry, images not referenced by another document are queued for background deletion.

You can delete the entire account immediately from Dashboard by typing the current email and confirming again. The account, documents, versions, shares, MCP tokens, WeChat binding, and image ledger are deleted, while related object-storage images are removed asynchronously. This cannot be undone.

Minimal Stripe payment records needed for tax, disputes, and fraud prevention are detached from the account and retained as required by law. Deleted data in backups expires with the backup retention cycle and is not used to restore a deleted account.

Feedback text, source pages, and client details you submitted are detached from your account and retained for troubleshooting and product improvement; they may still contain personal information you entered.

If you cannot sign in or need to exercise another statutory right, you can still contact us at the address below.

Security

We use HTTPS in transit, hashed password storage, and database permission isolation. No system can be guaranteed perfectly secure, so please do not keep highly sensitive material such as card numbers or identity documents in your notes.

Your Rights

You can view and change your account details, export all documents, and delete documents or your account directly from Dashboard. Where local law grants additional rights to access, correct, export, or erase personal data, you can exercise them via the email below.

Children

The service is not directed at children under 14. If we discover such an account, we will delete it.

Contact

Privacy requests can be sent to cfjwlchangji@gmail.com.