Legal

Privacy Policy

Effective date: to be inserted on publication

Draft — this page is a structural scaffold. Each section needs final language from counsel before publication.

1. Who we are

Shady Notes is a product of ROUNDRECT PTY LTD (trading as Round Rect). Reach us at hello@shadynotes.app.

INSERT: legal entity details, postal address, DPO if required

2. Your notes never leave your Mac

Shady Notes stores every note as a plain .md file in a folder you choose on your own disk (default ~/Documents/ShadyNotes/). There is no sync service, no server, and no account holding your content. We cannot read your notes — the app has nowhere to send them.

INSERT: confirm no-network claim against the shipped build before publication

3. Analytics & telemetry

To be confirmed against the shipped build. The intent: no analytics SDK inside the macOS app; if any usage telemetry is ever added it will be strictly opt-in.

INSERT: verify what (if anything) the launch build emits; list event types and retention if any — do not publish unverified claims

4. Web analytics

What the marketing site collects (if anything) — to be decided before launch.

INSERT: pick and document the site analytics story (none / Plausible / other)

5. Payment processing

Subscriptions run through Clerk Billing, with Stripe as the payment processor. Stripe receives your name, email, billing address, and payment details; Clerk manages your account and subscription state; we receive subscription state and the email used at checkout. We never see your card.

INSERT: Clerk + Stripe privacy policy URLs; data-residency note

6. Cookies & local storage

The macOS app stores its settings locally (UserDefaults) and your notes on your disk. The marketing site's cookie story follows from section 4.

INSERT: list of local files/keys written by the app; confirm site sets no cookies

7. Your rights

Under GDPR/CCPA/APPs you can request access, deletion, or export of any personal data we hold (which, outside billing, is close to none); we'll respond within 30 days.

INSERT: full rights enumeration, response SLA, EU representative if required

8. Changes to this policy

We'll post material changes here and notify active subscribers by email at least 14 days before they take effect.

INSERT: change-notice mechanics