Privacy Policy

Who we are

WolfNote is operated by Wolf Software Systems Ltd, registered in the United Kingdom. Contact: paul@wolf.uk.com

What data we collect

Account data

When you sign up, we collect your company name, username, email address, and a bcrypt-hashed password. We do not store your password in plain text.

Notes and content

Your notes, task lists, images, drawings, and templates are stored in an isolated database specific to your company. We do not access, read, or analyse your content. Each company has its own separate database file.

AI processing

When you use AI features (chat, document generation, image generation), your content is sent to the AI provider you have configured (Anthropic Claude, Google Gemini, or your local Ollama instance). We do not store AI conversation history on our servers beyond the current session. If you use a local Ollama instance, no data leaves your network.

Payment data

Payments are processed by Stripe. We do not store credit card numbers. We store your Stripe customer ID and subscription status for billing purposes.

Cookies

Essential cookies

We use a JWT authentication token stored in localStorage (not a cookie) for the WolfNote application. This is essential for the service to function.

Analytics cookies

Our marketing website (wolfnote.org) uses Google Analytics to understand how visitors find and use our website. This is only loaded if you click "Accept" on the cookie consent banner. If you click "Reject", no analytics cookies are set and no data is sent to Google. You can change your preference by clearing the wolfnote_consent cookie from your browser.

Consent cookie

We store a wolfnote_consent cookie (value: "accepted" or "rejected") for 1 year to remember your analytics preference.

How we use your data

• To provide and maintain the WolfNote service
• To authenticate you and protect your account
• To process payments via Stripe
• To send transactional emails (account verification, password resets)
• To improve our website (via anonymised analytics, with your consent)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Data security

• All connections use TLS/HTTPS encryption
• Passwords are hashed with bcrypt (cost factor 12)
• Each company has an isolated SQLite database
• The application is built with Rust for memory safety
• JWT tokens expire after 30 days

Your rights (GDPR / UK GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your notes (PDF, HTML, Word, OpenDocument, Markdown, or plain text)
• Withdraw consent for analytics cookies at any time
• Object to processing of your personal data

To exercise any of these rights, contact paul@wolf.uk.com.

Data retention

Your data is retained for as long as your account is active. If you delete your account, all associated data (notes, tasks, settings) is permanently removed. Pending signups that are not verified are automatically deleted after 24 hours.

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.