Privacy Policy
This policy explains how we handle personal data on notecallapp.com and when you join the NoteCall waitlist. We have written it to be as clear as possible.
Last updated: October 23, 2026
This policy covers the NoteCall website and early-access waitlist. NoteCall itself is in development; a separate privacy policy describing how the NoteCall app processes calls and tasks will be published before launch.
1. Who is responsible for your data
The data controller is Flowline Development, Denmark. NoteCall is a product of Flowline Development.
For any privacy question or request, contact us at privacy@notecallapp.com.
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Full name, email address, and optionally company name and profession/industry | To add you to the waitlist and contact you about early access to NoteCall | Your consent, given when you join the waitlist (Art. 6(1)(a)) |
| Your choice about product news and marketing emails, with date and wording version | To send product news and offers only if you asked for them, and to document that choice | Your separate, optional consent (Art. 6(1)(a)); record-keeping as a legal obligation (Art. 6(1)(c)) |
| Signup source: the page you signed up on, campaign parameters in the link you followed (e.g. utm_source, utm_campaign), ad click IDs, referring website and first visit time | To understand which channels and campaigns bring people to the waitlist and measure their cost-effectiveness | Our legitimate interest in measuring our marketing (Art. 6(1)(f)) |
| A one-way, salted hash of your IP address and your browser's user-agent string | To prevent spam and abuse of the signup form (e.g. limiting repeated signups) | Our legitimate interest in keeping the service secure (Art. 6(1)(f)) |
| Emails you send us | To answer your questions | Our legitimate interest in responding (Art. 6(1)(f)) |
| Website usage data (only if you accept analytics or marketing cookies) | To understand how the website is used and measure advertising | Your consent (Art. 6(1)(a)); see our Cookie Policy |
We do not use your data for automated decision-making, and we do not sell personal data.
3. Marketing emails
Joining the waitlist means we may email you about your place on the waitlist and your early-access invitation. We will only send product news, newsletters or offers if you tick the separate, optional box. You can unsubscribe from marketing emails at any time via the link in each email or by contacting us.
4. Who we share data with
We use trusted service providers (data processors) who process data only on our instructions:
- Netlify — website hosting and the server function that receives the signup form.
- Supabase — the database where waitlist signups are stored.
- Cloudflare Turnstile — spam protection on the signup form, if enabled.
- Email service provider — to send waitlist and (if you opted in) marketing emails, once selected.
- Analytics and advertising providers — only if you have consented; listed in our Cookie Policy.
Some providers may process data outside the EU/EEA. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision (for example, the EU–US Data Privacy Framework, where the provider is certified).
5. How long we keep your data
- Waitlist data: until you ask us to remove it, or at the latest 24 months after NoteCall's public launch.
- Marketing consent records: for as long as we send you marketing, and for up to 3 years afterwards to document consent.
- Emails with us: as long as needed to handle your request, normally no longer than 24 months.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing (including processing based on legitimate interest);
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing that took place before withdrawal.
To exercise your rights, email privacy@notecallapp.com. We will respond within one month. You also have the right to complain to a data protection supervisory authority — in Denmark, this is Datatilsynet (datatilsynet.dk) — or the authority in the country where you live or work.
7. Security
Signups are sent over an encrypted connection (HTTPS) to a server-side function and stored in a database that is not accessible directly from the public internet without credentials. Access is limited to people who need it. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
8. Children
NoteCall is intended for professionals. The waitlist is not directed at anyone under 16.
9. Changes
We may update this policy, for example when NoteCall launches. The date at the top shows when it was last changed. If changes materially affect how we use data you have already given us, we will let you know.