Privacy Policy

1.Who this policy covers

• People who use Notice: you, when you create an account and use Notice on the web or in its desktop app.
• People in your work: people you invite to a Space, and people your work mentions, such as a colleague or client named in a brief, a file or a calendar event. We handle their information on your behalf so Notice works for you. You are responsible for having the right to put it into Notice.
• Visitors to notice.do.

2.What we collect

• Account details: your email address, your name or workspace name, the answers you give when you set Notice up, and either a password (stored only as a one-way hash we cannot read) or the identity Google, Apple or Microsoft confirms when you sign in with them, with your Google profile picture if you use Google.
• Your work: Work items with their briefs, plans, decisions, status and history; files you add to the Library and the text Notice reads from them; your chats with Notice and what you attach to them; outputs Notice saves for you; Spaces; routines you set up, such as a daily focus email; and the events in Notice’s own calendar, which you, Notice’s AI when you ask it, or an outside AI tool you let do everything you can add there, with each change made to them and who made it, so it can be undone.
• Connections: if you connect Google Calendar, your events and the access Google grants (section 6).
• Outside AI tools: the tools you connect, what each may do, when each signed in and was last used, and everything each one writes. We keep only a fingerprint of each key and sign-in, never the key itself.
• Billing: your plan and payment status, your customer and subscription numbers at Stripe, and the messages Stripe sends us about them. If you sign up with Google, Apple or Microsoft, we create your customer record at Stripe then, with your name and email address. Stripe collects card details; they never reach our servers.
• Usage and technical information: the pages and features you use in Notice, your AI usage, your IP address and the approximate location it implies, your browser and device type, and security records such as sign-ins.
• Visitors to notice.do: the page you visit, the site or campaign that brought you, a random visitor number kept in your browser, and your IP address and browser type (section 7). If you then sign up, we link these to your account so we know which pages bring people to Notice.
• When you contact us: what you send us.

3.How Notice’s AI uses it

Chat with Notice, on Home and in Ask Notice, runs on Claude Haiku 5.5 or on Luna, which you choose for each new chat. Both are reached through OpenRouter with zero data retention: Claude runs on Google Cloud’s or Amazon Web Services’ endpoints and Luna on Microsoft Azure’s, and the provider that runs the model does not keep what we send it. When you add a document to your Work, or write out a timetable for a semester, Claude Haiku 5.5 reads it the same way, and it writes the briefings Notice prepares before your classes. Notice’s other AI features run on OpenAI’s models through its business API. To answer you, we send the model what the task needs: your message, the relevant parts of your work (such as a brief, related files and decisions) and, where it is relevant, your calendar events for the days you ask about.

• Files. To read a PDF or Word file, we may send it to OpenAI, where it expires within an hour and is deleted once read.
• Web search. Chat searches the web only while you have web search on, in the chat bar’s + menu or in Settings; it is off until you turn it on. Zero data retention does not cover web search: when Notice searches the web for you, the search runs through OpenAI’s search tool. Only the search request goes; your chats, files and Work stay out of it.
• Images. When you ask Notice for an image, OpenAI makes it from your request.
• The desktop app. If you ask Notice about the page open in the desktop app’s browser, we send OpenAI screenshots of that page. Anything visible on it goes with them, including an email or an account you are signed in to there.
• Luna. Where Luna works on a part of a plan for you, it runs on Claude Haiku 5.5 on Google Cloud’s or Amazon Web Services’ endpoints, reached through OpenRouter, with zero data retention: the model’s provider does not keep what Luna sends it. Luna’s web searches go through OpenAI’s search tool with the part’s title, why it matters and the Work item’s title.

OpenAI does not use content sent through its API to train its models, and we have not opted in to let it. It may keep that content for up to 30 days to detect abuse, then deletes it unless the law requires otherwise.

Automated decisions. Notice’s AI drafts, summarises, sorts and suggests. It does not make decisions that have legal effects for anyone or that significantly affect a person’s rights: you decide what to accept, send or act on. If we add a feature where a computer program makes, or substantially and directly helps make, such a decision, we will describe it here first, including the kinds of decisions and the personal information involved.

4.Outside AI tools you connect

You can connect an outside AI tool, such as Claude, ChatGPT, Claude Code, Codex or Cursor, by signing in with Notice or with a key (Settings → AI access).

• What a tool can read: unless you narrow it, your live Work (titles, briefs, plans, status, the workspace documents each item relies on, and the reports and replies on it), your workspace documents in the Library, and your calendar. You can make a tool read only, limit it to chosen Work items, or turn documents and the calendar off for it.
• What it never reads: your private files, saved outputs and chats.
• What it can do: as you allow, post findings, questions and handoffs; open Work items; add new versions of working documents; and propose changes to briefs. What it posts shows under its name, marked as reported, not confirmed. If you let it do everything you can, it also changes your Work as you would, adds new versions of governing documents, and adds, changes and removes events in Notice’s own calendar, at once and under its name, each with Undo. It never changes AI access, your account, billing or sign-in, or your Google Calendar.
• The tool’s provider: when a tool reads your work, the company behind it (for example Anthropic, OpenAI, Cursor or Google) receives that content and handles it under your agreement with them, not under this policy.
• Keys and sign-ins: we keep only a fingerprint of each key and sign-in. A sign-in lasts an hour at a time and renews for up to 90 days.
• Withdrawing access: withdraw a tool at any time and its keys and sign-ins stop working from its next request. What it already wrote stays in your Work, under its name.

5.Spaces and sharing

If you create a Space and invite someone, they can see what you add to it, as the role you give them allows: an editor takes part, a viewer can only read. Adding something copies it into the Space: a Work item’s details, up to the last 100 messages of a chat, or a file’s text. An invitation is a link that works only for the email address you invited, and it expires after seven days. You can remove items or people at any time.

6.Google Calendar

If you connect Google Calendar, Notice reads the events on your calendar (titles, descriptions, locations, times, status, and who is invited, with their replies) so they appear in Schedule and Notice can answer questions about your week. It checks for changes every few minutes. Who is invited shows when you open an event on Schedule; Notice reads it with the event and doesn’t keep it. Notice asks Google only for permission to see your events, so it cannot add, change or delete them.

Notice’s AI reads your events when they are relevant to what you ask, and an outside AI tool you allow to read your calendar receives your events for the days it asks about (section 4).

When you disconnect the calendar, we delete Notice’s access to it and the copies of your events Notice kept. You can also remove Notice’s access in your Google Account’s settings at any time.

Notice’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7.Analytics, cookies and browser storage

• On notice.do and at sign-up, our own analytics records each page you visit, the site or campaign that brought you (including any ad click number in the page address), a random visitor number kept in your browser, and your IP address and browser type. It is stored in our own database.
• At sign-up and in the app, we use PostHog to see which pages and features are used: page views, when you leave a page, and clicks. A click records what kind of element it was and where, never its text. In the app these events are linked to your account’s number, never your name or email address. Nothing records your screen or what you type. PostHog receives them through our own address, without your cookies or sign-in, but with your IP address, which it uses to estimate your location. Our pricing page uses PostHog too.
• No advertising trackers: Notice does not use the Meta Pixel, Google Ads tags or Microsoft Clarity.
• Cookie preferences, at the foot of our pages, turns PostHog off on notice.do’s pricing page. It does not cover sign-up, the app or our own page records, which are part of how we run and improve Notice.

The app also keeps a few things in your browser’s storage, such as your recent items and your choice of theme, so it opens quickly and as you left it.

8.Why we use it

• To run Notice for you: keep your work, answer in chat, show your schedule, run your routines, and give the tools you connect the access you chose.
• To send the emails you ask for, such as a daily focus email, which you can turn off, and service emails about your account, such as checking your email address or resetting your password.
• To keep Notice secure, prevent abuse and fix problems.
• To understand how people find and use Notice, through the analytics in section 7, so we can improve it.
• To manage billing through Stripe, if you pay for Notice.

We do not send marketing emails. If we start, we will ask you first, and every one will have an unsubscribe link. We do not sell personal information, share it with data brokers or use it for advertising.

9.Who we share it with

We use a small set of service providers to run Notice. Each receives only what it needs for its job. Our Subprocessors page lists them, what each does and where it handles information. We also share information:

• with the outside AI tools you connect and the people you invite to a Space, as you direct (sections 4 and 5);
• where the law requires it, or to protect someone from serious harm;
• with our professional advisers, who keep it confidential;
• if Notice is restructured or sold, with the new owner, who must keep to this policy.

10.Where it is stored

Notice’s servers and database are hosted by Render in Singapore, including the files you upload. Some of our providers handle information in other countries, mainly the United States; the Subprocessors page gives each one’s location. When we disclose personal information overseas, we take reasonable steps to make sure it is handled consistently with the Australian Privacy Principles, mainly through our agreements with those providers.

11.How long we keep it, and deleting your account

• We keep your account and your work while your account is open.
• Work items you delete stay in Recently deleted for 30 days, then are removed.
• Analytics events and AI usage records in our database are deleted 12 months after they are made.
• Server logs are kept by our host for a limited time, then deleted.
• Backups made for disaster recovery are overwritten on a rolling basis.

Deleting your account

You can delete your account at any time in Settings. Straight away, we:

• delete your Work and everything in it, your Library files, chats and saved outputs, Luna’s work, your routines, and your usage and analytics records;
• delete the Spaces you created, and what you added to anyone else’s;
• delete your connections and what they fetched, and stop every outside AI tool’s keys and sign-ins;
• remove your email address, password, name and sign-in details from your account;
• cancel any subscription and delete your customer record at Stripe.

We keep only the billing records the law requires, and a security record of the deletion with the account’s email address. Analytics PostHog has already received stay linked to a random account number, not to your name or email address.

12.Security

All traffic to and from Notice is encrypted (HTTPS). Passwords are stored only as one-way hashes, sign-in attempts are limited, and the access tokens for your connections are encrypted. AI access keys and sign-ins are stored only as fingerprints. Card details are handled entirely by Stripe. Access to production data is restricted. No online service can promise perfect security, but we take it seriously and fix problems as soon as we find them.

13.Your choices and rights

• Access and correction: you can see and change most of what we hold about you in Notice. For anything else, or for a copy of your information, email us and we will respond within 30 days.
• Deletion: delete your account in Settings, or email us and we will delete it for you (section 11).
• Complaints: contact us first at support@notice.do and we will do our best to sort it out. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner.

If your information is in Notice because someone else put it there, for example because they named you in their work or invited you to a Space, you can contact them directly, or contact us and we will help.

Sensitive information. Notice is not designed for sensitive information, such as health information. Please do not put it into Notice unless you need to and are allowed to.

Outside Australia. If you use Notice from the EU, the UK or elsewhere, we handle your information as this policy describes, and where privacy law there gives you additional rights that apply to us, we will honour them. Contact us to use any of them.

14.Data breaches

If a data breach is likely to result in serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires: what happened, what information was involved, and what we are doing about it.

15.Children

Notice is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18 as a user.

16.Changes to this policy

When we change this policy we update the version and date at the top of this page. For a significant change, we will email you before it takes effect, and if you do not agree, you can delete your account before then.

17.Contact