개인정보처리방침

1. Who We Are (Data Controller)

Note Bridge ("we", "us", "our") is the data controller for your personal data as described in this Privacy Policy. Our payment processor (identified in §5) acts as an independent data controller for payment data they process on our behalf.

2. Data We Collect

3. Legal Basis for Processing

• Contract performance: Processing your data to provide the migration service you requested.
• Legitimate interest: Service improvement, security, and fraud prevention.
• 동의 또는 적용 가능한 법적 근거: 필요한 경우 Note Bridge가 비필수 분석 동의를 관리합니다. D1 지속 기여도는 캠페인 측정, 사기 방지, 집계 비즈니스 보고라는 정당한 이익을 위해 처리됩니다.

4. How We Use Your Data

• Authenticate you and maintain your session
• Read your OneNote content when you initiate a migration
• Process your Obsidian vault files for migration — individual files are uploaded directly from your browser; no third-party API access is required
• Create Notion pages with content you select
• Track migration status and history
• Process payments (via our payment processor — we never see card numbers)
• Send service notifications (migration complete, failures)
• Note Bridge가 관리하는 GA4 분석과 개인정보 보호가 제한된 D1 최초 접점 기여도 기록으로 제품 사용과 마케팅 기여도를 측정합니다

Note Bridge는 분석 동의를 관리하고 허용된 경우 GA4를 로드해 행동 분석을 수행합니다. D1 최초 접점 기여도 기록은 마이그레이션 콘텐츠, 노트북 이름, 페이지 제목, OAuth 식별자 또는 결제 카드 데이터를 분석 도구로 보내지 않고 어떤 페이지와 캠페인이 가입, 마이그레이션, 구매로 이어지는지 이해하는 데 사용됩니다.

5. Third-Party Data Processors

6. Data Retention

• OneNote page/section content (HTML): Processed transiently and not persisted after job completion.
• Obsidian vault files: Individual files are uploaded directly from your browser to temporary cloud storage (Cloudflare R2) for processing. Deleted immediately upon migration completion. As a safety measure, any remaining files are automatically purged no later than 7 days after upload. No vault content is retained beyond this period.
• Page titles and section names: Retained for up to 15 days after job completion to allow migration verification, then automatically deleted. These are stored in our database and permanently deleted on account deletion.
• Account data: Retained until you delete your account.
• Authentication credentials: Automatically deleted within 3 days of your last sign-in. If you disconnect the service or delete your account, credentials are removed immediately.
• Transaction Metadata: We retain essential transaction records (timestamp, page count, and amount) as long as necessary to fulfill our legal and tax obligations. Your email for these transactions is held by our payment processor (see §5), not by us. This data is strictly limited to service usage logs and is disconnected from your migrated content upon account deletion. No card data is retained.
• 마케팅 기여도 및 분석 동의: D1 최초 접점 기여도 기록은 정리된 랜딩 경로, 리퍼러, 캠페인 매개변수, 로케일, 경로 카테고리를 저장합니다. 개인 쿼리 문자열이 포함된 전체 URL, OAuth 토큰, 마이그레이션 콘텐츠, 노트북 이름 또는 페이지 제목은 포함하지 않습니다. 이러한 기록은 계정 삭제 시 삭제됩니다. 결제 수준 기여도 스냅샷은 회계, 사기 방지, 집계 비즈니스 보고에 필요한 경우 거래 메타데이터와 함께 보관될 수 있습니다. Note Bridge 동의 선택과 퍼스트파티 분석 쿠키는 Note Bridge/Google 보관 설정을 따릅니다.

7. Your Rights

You have the following rights regarding your personal data:

• Access: View your data in Settings.
• Correction: Update your profile via Microsoft re-authentication.
• Deletion: Delete your account from Settings → Danger Zone. All personal data — including your profile, authentication credentials, first-party user attribution, and any retained page titles and section names — is permanently removed on deletion. Anonymous usage statistics (page counts, timestamps, migration status, and aggregated attribution reports) are retained with no identifying information attached, for product analytics and service improvement. Transaction records (timestamp, page count, amount, and payment-level attribution snapshots) are retained for tax compliance, fraud prevention, and aggregate business reporting; your email for these transactions is held by our payment processor (§5), not by us.
• Portability: Export your migration history (CSV) — coming soon.
• 동의 철회: 연결된 서비스는 설정에서 언제든지 해제할 수 있습니다. 분석 동의가 필요한 경우 쿠키 관리 컨트롤로 Note Bridge 동의 배너를 다시 열고 비필수 사용 분석 선택을 변경하세요. Note Bridge는 동의 엔진과 퍼스트파티 Google Analytics 4 로딩을 제공합니다.
• Object: Contact us to object to specific processing.
• Do Not Sell (CCPA): We do not sell personal data. We do not share personal data for cross-context behavioral advertising. No opt-out mechanism is needed because no sale occurs.
• Lodge a complaint: With your local data protection authority.

To exercise any of these rights, contact us at support@note-bridge.co.

8. Cookies

로그인 상태 유지와 서비스 운영을 위해 필수 쿠키를 사용합니다. 또한 Note Bridge로 유입된 최초 랜딩 페이지, 리퍼러, 허용된 캠페인 매개변수를 기억하기 위해 퍼스트파티 기여도 저장소를 사용할 수 있습니다.

Note Bridge 동의 배너는 비필수 사용 분석 선택을 관리합니다. Note Bridge는 동의 엔진과 퍼스트파티 분석 쿠키/저장소를 제공합니다. 허용된 경우 Note Bridge는 Google Analytics 4를 로드하고 개인정보 보호가 제한된 행동 및 전환 이벤트를 전송합니다. D1 최초 접점 기여도에 민감한 전체 URL을 저장하지 않으며, 마이그레이션 콘텐츠, 노트북 이름, 페이지 제목, OAuth 식별자 또는 결제 카드 데이터를 분석 제공업체로 보내지 않습니다.

9. International Data Transfers

Your data may be processed on servers located outside your country of residence. Where required, we rely on standard contractual clauses (SCCs) or equivalent safeguards. Temporary content storage uses encrypted cloud infrastructure.

10. Children's Privacy

Note Bridge is not intended for users under 16. We do not knowingly collect personal data from children under 16. If we discover we have done so, we will delete that data immediately. Some EU member states permit digital consent from age 13 per GDPR Article 8(1); we apply the strictest threshold (16) globally.

11. Data Security

We implement the following security measures:

• Authentication credentials encrypted at rest and automatically deleted within 3 days of your last sign-in, minimizing the exposure window in the event of a security incident
• All data transmitted over encrypted connections
• Temporary content storage encrypted (server-side encryption)
• Regular security reviews
• Access to transaction logs is restricted to authorized personnel for support and accounting purposes only. We implement strict internal access controls on this data.

12. Changes to This Policy

We will notify you of material changes via email and/or in-app notice. Non-material changes will be reflected with an updated "Last updated" date at the top of this page.

13. Contact

support@note-bridge.co