Политика конфиденциальности
Эта страница доступна только на английском. Английская версия является основной.
You must be 16 or over to use LatexNotes. The Service is not intended for, or directed at, children under 16.
This policy explains what LatexNotes collects, why, the basis on which we do it, who it is shared with, where it is processed and how long we keep it. We try to collect as little as possible. Every company that handles personal data for us is named on our Subprocessors page, with what it receives and where it processes it.
Who is responsible for your data
LatexNotes is the controller of your personal data and is operated from the United Kingdom. For any privacy question or request, contact support@latexnotes.tech.
What we collect
- Account details - if you sign up, your email address and a securely hashed password (none if you only sign in with Google); if you give them, your name and your university or workplace (with Google sign-in, the name on your Google account); and whether you asked for emails with product updates and tips.
- Your notes - the files you upload, anything you draw or write in the app, and the LaTeX and PDFs produced from them. For signed-in users these are stored in your account so you can reopen them. If you use LatexNotes without an account, your list of notes is kept only in your own browser, but your upload is still processed on our servers and a copy of the result is kept there for up to 30 days.
- Sharing - if you share a note, we store who you have shared it with, the share links you create, and whether the note has a public link, so that access works. If you work on a note together in a live session, we store who is in the session while it runs, and the ink drawn in it is saved to the note.
- Study tools - your conversations with the study tools (explain, practice questions, plots) are saved only in your own browser. Flashcards you save to a note’s deck are stored in your account: each card’s question and answer, and when and how you rated it, so that it comes back on time. They are deleted with the note or your account. While you type in a note’s LaTeX editor, the text around your cursor is sent to an AI provider to suggest how the line goes on. It is not kept, except that a request that fails stays in our technical logs (see below); you can turn the suggestions off in Settings. To answer you, the part of the note you select, the note’s text and your question are sent to an AI provider, and our technical logs keep the start of each request (see Technical logs below).
- Problem reports and support messages - if you report a problem with a transcription, the report includes what you write plus the original upload, the result and technical details of the job, so we can reproduce and fix it. A support message contains what you write and, if you give it, your email address.
- Error reports - if something breaks, technical details of the error are sent to Sentry so we can fix it: what failed and where in our code, the page address (with any secret link codes taken out), your browser type, and your account id and email if you are signed in. We set Sentry not to collect your uploads or anything you type, though an error message can occasionally quote a few words of the text that caused it.
- Basic analytics - privacy-friendly, cookieless measurements from Vercel Web Analytics and Speed Insights: which pages are visited (with any secret link codes taken out), the site you came from, your browser, device type and country, and how fast pages load. Ahrefs Web Analytics, also cookieless, counts visits to our public pages only (the ones anyone can open without an account, never your notes or account pages): which page and its title, the site you came from, your browser, language, screen size and city or country. No advertising cookies, no cross-site tracking.
- Activity time - while you are signed in, which minutes you are active on the site, and how many minutes each day you have a note open while you work on it (your study time). Only counts of minutes, linked to your account id: never which note, what you did or anything you wrote. Your study time is shown to you in Account Analytics.
- Technical logs - to keep the Service running smoothly we log the requests we send to our AI model providers: when each ran, which provider handled it, how long it took, its size, any error, and the start of the request itself (up to 1,500 characters, which can include text from your note or your question). We keep these only for our most recent few thousand requests, and what the AI sent back is deleted from them automatically after 48 hours. Our hosting provider also keeps short-lived logs of the requests our servers receive.
- Product usage - aggregate records of how the app is used: for example that a transcription succeeded or failed and the general reason why, and which features were used. This is linked only to your account id, never includes the content of your notes, and uses no cookies and no third-party trackers. We use it to find and fix what is broken or confusing.
Why we can process it (legal bases)
- To provide the Service - creating your account, transcribing and storing your notes, running the study tools, and enabling any sharing you set up: performance of our contract with you.
- To keep the Service secure and improving - preventing abuse and understanding, in aggregate, how features are used: our legitimate interests.
- To email you about your account - a sign-up code, a password reset, or a notice that your Pro plan or free trial is ending or has ended: performance of our contract with you, or our legitimate interests. The email we send when a free trial ends can include an offer on Pro; it is never sent to an account that has unsubscribed, and it always carries an unsubscribe link: our legitimate interests.
- Product updates and tips - only if you ask for them when you sign up: your consent, which you can withdraw at any time with the unsubscribe link.
- Anything else that needs consent - we rely on your consent, which you can withdraw at any time.
How your notes are processed
To transcribe a page, an image of it is sent to an AI model, which returns the LaTeX, and the transcribed text can be sent again for finishing steps. The study tools, Convert to LaTeX, Fix with AI and our free tools work the same way: the part you select, the note you are editing or the text you paste, with your note’s text as context, goes to an AI model. These models are run for us by DeepInfra, our AI provider. The requests come from our servers, so it does not receive your name, email address, account id or IP address.
Snip maths in our Chrome extension takes a picture of the tab you are on only when you press its shortcut or its button. Only the area you then select leaves your browser: it comes to LatexNotes and goes to our AI provider to be read, like a photo you upload, and we do not save the picture. The LaTeX it gives you is kept in the extension on your own computer, as your recent snips.
We do not ask our AI provider to delete requests immediately (sometimes called zero data retention), so it handles what it receives under its own standard API terms, linked from the Subprocessors page. Those terms can allow it to keep requests for a limited time, for example to detect abuse, and to review them to provide and improve its services. Your content goes to it only to run the features you use: LatexNotes does not sell your data, use it for advertising, or use it to train our own models.
Sharing a note with others
Sharing is entirely your choice. If you share a note, the account(s) you share it with can view it - and edit it if you grant edit access - and a share link lets anyone signed in who opens it while it is valid (links last 12 hours) gain that access. Shared notes appear under the other person’s “Shared with me”.
If you turn on a public link for a note, anyone who has its address can view a read-only copy of the note, its PDF and its LaTeX, without an account, until you turn the link off. For a PDF you imported, a public link shows that file itself. The original scan behind a transcribed note is never shown, and a public link never shows who you are. We never share your notes with other users unless you choose to; you can remove access, turn off a public link, or delete the note, at any time.
Where data is stored and sent
Our servers run on Render in Frankfurt, Germany, and your account and saved notes are stored with Supabase in Ireland (Amazon Web Services, eu-west-1). The website reaches you through Vercel’s global network. Our AI provider, and several of our other providers, are based in the United States, so what they receive is processed there; the Subprocessors page says where each one processes data. Where personal data leaves the UK or EEA, we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, and, where a provider is certified, the EU-US Data Privacy Framework and its UK Extension.
Third parties we use
- Render - runs our servers, in Frankfurt, Germany.
- Supabase - our database and file storage, in Ireland.
- Vercel - serves the website and the app, passes requests on to our servers, and provides cookieless analytics.
- Cloudflare - Turnstile, the check that tells people from bots.
- DeepInfra - the AI model provider described above.
- Google - optional sign-in with your Google account.
- Resend - sends our emails.
- Lemon Squeezy - processes payments as our Merchant of Record (Pro and paid add-ons); card details are handled on their checkout and never reach LatexNotes.
- Sentry - error monitoring: receives the technical details above when something breaks.
- Ahrefs - cookieless analytics of visits to our public pages.
- jsDelivr - delivers Python to your browser when you run Python in the Write code tool or a code cell; your programs run only on your device.
The full list, with what each one receives, where it processes data and links to its own terms, is on our Subprocessors page. Some features pass your content to another service only when you ask: Open in Overleaf sends the note’s LaTeX to Overleaf, the bibliography tool looks up the references you paste in public catalogues, and our Chrome extension imports files from your Blackboard. That page covers those too.
How long we keep it
- Notes you save stay until you delete them or close your account.
- The original scan of an upload is kept for about a week to power the compare view, then removed.
- Each transcription’s job record, which holds a copy of its result, is deleted 30 days after the job finishes. That is also how long the result of an upload made without an account is kept.
- For a problem report, the attached upload and result are deleted after 2 days and the report itself after 7 days. Support messages are deleted after 7 days.
- Your account details stay until you ask us to delete your account.
- Which minutes you were active is kept for 45 days, and your daily study time for about 13 months (so Account Analytics can show a year). Both are deleted with your account.
- If we freeze an account for misuse, we keep a keyed one-way hash of its email address (never the address itself) so the same email can’t be used to sign up again, even after the account is deleted. We delete the hash if the account is unfrozen.
- Aggregate, account-linked usage records may be kept to understand product trends; they never contain the content of your notes.
- In our technical logs, what the AI sent back is deleted after 48 hours, and the start of each request drops out as newer requests come in (we keep only the most recent few thousand); the remaining technical details, such as timings and errors, are kept to improve the Service.
- After deletion, residual copies may persist briefly in our providers’ routine backups before they expire.
Cookies and local storage
We use three small first-party cookies, and no advertising or tracking cookies:
- nl_session keeps you signed in, for 14 days.
- lang remembers which language of the site you use (English, Russian or Chinese), so you land on the right one (1 year).
- ui_lang tells our servers which language the page you are reading is in (1 year).
Google’s sign-in button sets one more cookie on our site when it appears on the sign-in or create-account screen: g_state, which Google uses for its sign-in. It holds timestamps and a code from Google, not your name or email, and lasts 180 days. Google’s privacy policy covers it.
Our analytics (Vercel Web Analytics, Speed Insights and Ahrefs Web Analytics) do not use cookies. If you choose “Continue with Google” or pay through Lemon Squeezy, those services set their own cookies on their own sites, under their own policies. To make Google sign-in quick, your browser may connect to Google’s sign-in servers when you open the site: nothing about you is sent over that connection unless you sign in with Google, but Google can see your IP address. Signed-out note history, your study-tool chat history and your display preferences are saved only in your own browser (IndexedDB and local storage); we keep no copy of them, apart from the technical logs described above. Cloudflare Turnstile checks your browser and processes your IP address when you create an account or use LatexNotes without one, to tell people from bots. Because we use no advertising or cross-site tracking cookies, we do not show a cookie banner.
Your rights
You can ask to access, correct, delete, restrict, or receive a copy of your data, and object to certain processing; where we rely on consent you can withdraw it. Email support@latexnotes.tech and we will action it. You can also delete any saved note yourself from your dashboard, or ask us to delete your whole account. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.
Children
The Service is intended for people aged 16 or over and is not directed at children under 16. We do not knowingly collect their data; if you believe someone under 16 has an account, contact us and we will remove it.
How we protect it
We protect data in transit with HTTPS, store passwords only as secure hashes, keep your sign-in in a secure cookie that page scripts cannot read, encrypt two-factor secrets at rest, and limit access to what is needed to run the Service. Card and billing details never reach us (Lemon Squeezy handles them). No system is perfectly secure, but we check the Service’s security regularly, and if a breach ever affects your personal data we will act on it and tell you and the Information Commissioner’s Office where the law requires.
Contact
Privacy questions or requests: support@latexnotes.tech or the Support page.