1. Scope
This notice describes how not24get.me ("we", "us") processes personal data when you use the Service. It applies together with our Terms of Service. If you do not agree, do not use the Service.
For your account and our own operations we act as a data controller. For personal data inside your organisation's workspace, we generally act as a processor on behalf of your organisation, which is the controller; that processing is governed by our agreement, including any data processing terms, with the organisation.
2. Data we collect
We collect data you provide (for example account email, organisation name, bookmarks you store) and technical data needed to run the Service (for example logs, security signals, approximate usage). The exact categories may change as features grow during early release.
If you sign in with Google or GitHub, we receive limited profile data from that provider, typically a verified email address, display name, avatar URL, and a provider account identifier, so we can create or recognise your account. If you request a magic-link sign-in, we process the email address you enter and send a one-time link to that address. We store linked sign-in methods on your account so you can use them again.
3. How we use data
We use data to provide and secure the Service, to communicate with you about your account, and to meet legal obligations. We do not sell your personal data.
4. Legal bases for processing
Where the GDPR or similar laws apply, we process personal data on these legal bases: performance of a contract, to provide the Service and your account; our legitimate interests, to secure, analyse, and improve the Service, prevent abuse, and communicate with you, balanced against your rights; your consent, for non-essential cookies, analytics, and any optional feature that asks for it; and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.
5. Cookies, analytics, and third parties
We use strictly necessary cookies to run the Service and, with your consent, analytics, performance, and marketing cookies. A consent management tool lets you accept or reject non-essential cookies and change your choice at any time.
We share personal data with service providers that process it on our behalf under appropriate agreements, including: Creem (creem.io), our third-party merchant of record, which handles payments, billing, and tax (see our Terms of Service); Google Analytics and Google Tag Manager for usage analytics on this marketing site and, after you consent, on the app at app.not24get.me (same Google Analytics property) so we can see which pages lead to sign-up and sign-in; LinkedIn (via the LinkedIn Insight Tag) for advertising measurement, conversion tracking, and audience insights when you accept marketing cookies, see LinkedIn's Cookie Policy; Microsoft Advertising (Bing UET) for advertising measurement and conversion tracking when you accept marketing cookies, see Microsoft's Privacy Statement; Microsoft Clarity for session replay and usage analytics when you accept analytics cookies, see Microsoft's Privacy Statement; CookieYes for consent management; Cloudflare for security and performance; Formspree for contact-form messages; and Gravatar to display profile images. When you choose Google or GitHub sign-in, those providers act as independent controllers for their own authentication services under their policies; we receive only the limited profile data described in Section 2. Magic-link emails are sent through our email delivery provider. Some blog pages can load a YouTube player after you choose to play a video; playing it may let YouTube set cookies or collect device data under Google's Privacy Policy. These providers act on our instructions and may not use your data for their own purposes except as set out in their own policies. We do not sell your personal data.
6. International transfers
Some of our service providers are located outside your country, including in the United States. Where we transfer personal data outside the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision (including the EU-US or UK-US Data Privacy Framework where a provider is certified). Contact us for more information about these safeguards.
7. Retention
We keep data only as long as needed for the purposes above, including legal and security requirements. Tenant deletion and purge timelines follow product documentation and your plan.
8. Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, or misuse, such as encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
To report a security vulnerability or any security concern about the Service, contact security@not24get.me. Please give us a reasonable opportunity to investigate and address the issue before disclosing it publicly.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal data, to object to processing, to withdraw consent where we rely on it, and to lodge a complaint with your data protection regulator. To exercise any of these rights, contact us at support@not24get.me. We respond within the time limits required by applicable law. If your data sits within an organisation's workspace, we may direct your request to that organisation as controller.
10. Children's privacy
The Service is not directed to children. You must be at least 16 years old, or the minimum age of digital consent in your country, to use the Service, and we do not knowingly collect personal data from children below that age. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.
11. Browser extension
If you install the not24get browser extension, it stores an API token on your device and sends data to app.not24get.me only when you sign in and use save, check, or optional bookmark import. That includes page URL, title, optional note and tags, and bookmark URLs/titles when you choose import. We do not collect browsing data in the background.
The extension does not sell your data or use it for advertising or data brokering. Distribution on Google Chrome complies with the Chrome Web Store User Data Policy, including Limited Use requirements. Distribution on Mozilla Firefox follows Mozilla add-on data policies. Distribution on Microsoft Edge follows Microsoft Edge Add-ons policies.
12. Changes
We may update this notice. We will post updates here when required.
13. Contact
For privacy questions, contact your organisation administrator or email support@not24get.me.