隱私政策

1. Who We Are (Data Controller)

Note Bridge ("we", "us", "our") is the data controller for your personal data as described in this Privacy Policy. Our payment processor (identified in §5) acts as an independent data controller for payment data they process on our behalf.

2. Data We Collect

3. Legal Basis for Processing

• Contract performance: Processing your data to provide the migration service you requested.
• Legitimate interest: Service improvement, security, and fraud prevention.
• 同意或適用的法律依據: 在法規要求時，Note Bridge 管理非必要分析同意。D1 持久歸因基於衡量行銷活動、防詐欺與彙總商業報告的正當利益處理。

4. How We Use Your Data

• Authenticate you and maintain your session
• Read your OneNote content when you initiate a migration
• Process your Obsidian vault files for migration — individual files are uploaded directly from your browser; no third-party API access is required
• Create Notion pages with content you select
• Track migration status and history
• Process payments (via our payment processor — we never see card numbers)
• Send service notifications (migration complete, failures)
• 透過 Note Bridge 管理的 GA4 分析與隱私限制的 D1 首次接觸歸因紀錄，衡量產品使用與行銷歸因

我們不會出售您的資料，也不會為跨情境行為廣告分享您的資料。Note Bridge 會管理分析同意，並在允許時載入 GA4 進行行為分析。D1 首次接觸歸因紀錄協助我們了解哪些頁面與行銷活動帶來註冊、搬移和購買，同時不會把搬移內容、筆記本名稱、頁面標題、OAuth 識別碼或付款卡資料傳送給分析工具。

5. Third-Party Data Processors

6. Data Retention

• OneNote page/section content (HTML): Processed transiently and not persisted after job completion.
• Obsidian vault files: Individual files are uploaded directly from your browser to temporary cloud storage (Cloudflare R2) for processing. Deleted immediately upon migration completion. As a safety measure, any remaining files are automatically purged no later than 7 days after upload. No vault content is retained beyond this period.
• Page titles and section names: Retained for up to 15 days after job completion to allow migration verification, then automatically deleted. These are stored in our database and permanently deleted on account deletion.
• Account data: Retained until you delete your account.
• Authentication credentials: Automatically deleted within 3 days of your last sign-in. If you disconnect the service or delete your account, credentials are removed immediately.
• Transaction Metadata: We retain essential transaction records (timestamp, page count, and amount) as long as necessary to fulfill our legal and tax obligations. Your email for these transactions is held by our payment processor (see §5), not by us. This data is strictly limited to service usage logs and is disconnected from your migrated content upon account deletion. No card data is retained.
• 行銷歸因與分析同意: D1 首次接觸歸因紀錄會儲存已清理的登陸路徑、參照來源、行銷活動參數、語言環境與路由類別。它們不包含帶有私人查詢字串的完整網址、OAuth 權杖、搬移內容、筆記本名稱或頁面標題。這些紀錄會隨帳戶刪除；付款層級歸因快照可能會與交易中繼資料一併保留，用於會計、防詐欺與彙總商業報告。Note Bridge 同意選擇與第一方分析 Cookie 依 Note Bridge／Google 保存設定處理。

7. Your Rights

You have the following rights regarding your personal data:

• Access: View your data in Settings.
• Correction: Update your profile via Microsoft re-authentication.
• Deletion: Delete your account from Settings → Danger Zone. All personal data — including your profile, authentication credentials, first-party user attribution, and any retained page titles and section names — is permanently removed on deletion. Anonymous usage statistics (page counts, timestamps, migration status, and aggregated attribution reports) are retained with no identifying information attached, for product analytics and service improvement. Transaction records (timestamp, page count, amount, and payment-level attribution snapshots) are retained for tax compliance, fraud prevention, and aggregate business reporting; your email for these transactions is held by our payment processor (§5), not by us.
• Portability: Export your migration history (CSV) — coming soon.
• 撤回同意: 您可隨時在設定中取消綁定服務。需要分析同意時，請使用「管理 Cookie」控制項重新開啟 Note Bridge 的同意橫幅，並變更非必要使用分析選擇。Note Bridge 管理同意，並在允許時直接載入 Google Analytics 4。
• Object: Contact us to object to specific processing.
• Do Not Sell (CCPA): We do not sell personal data. We do not share personal data for cross-context behavioral advertising. No opt-out mechanism is needed because no sale occurs.
• Lodge a complaint: With your local data protection authority.

To exercise any of these rights, contact us at support@note-bridge.co.

8. Cookies

我們使用必要 Cookie 讓您保持登入並維持服務運作。我們也可能使用第一方歸因儲存，記住帶您來到 Note Bridge 的首次登陸頁、參照來源與允許的行銷活動參數。

Note Bridge 的同意橫幅會管理非必要使用分析選擇；允許時，Note Bridge 會直接載入 Google Analytics 4 並傳送隱私限制的行為與轉換事件。我們不會在 D1 首次接觸歸因中儲存敏感完整網址，也不會將搬移內容、筆記本名稱、頁面標題、OAuth 識別碼或付款卡資料傳送給分析供應商。

9. International Data Transfers

Your data may be processed on servers located outside your country of residence. Where required, we rely on standard contractual clauses (SCCs) or equivalent safeguards. Temporary content storage uses encrypted cloud infrastructure.

10. Children's Privacy

Note Bridge is not intended for users under 16. We do not knowingly collect personal data from children under 16. If we discover we have done so, we will delete that data immediately. Some EU member states permit digital consent from age 13 per GDPR Article 8(1); we apply the strictest threshold (16) globally.

11. Data Security

We implement the following security measures:

• Authentication credentials encrypted at rest and automatically deleted within 3 days of your last sign-in, minimizing the exposure window in the event of a security incident
• All data transmitted over encrypted connections
• Temporary content storage encrypted (server-side encryption)
• Regular security reviews
• Access to transaction logs is restricted to authorized personnel for support and accounting purposes only. We implement strict internal access controls on this data.

12. Changes to This Policy

We will notify you of material changes via email and/or in-app notice. Non-material changes will be reflected with an updated "Last updated" date at the top of this page.

13. Contact

support@note-bridge.co