Privacy Policy

Last updated: September 12, 2026

This Privacy Policy explains how StructNotes™ (“StructNotes,” “we,” “us,” or “our”), operated by structnotes.io, collects, uses, shares, and protects information when you use the StructNotes website and application at structnotes.io (the “Service”). StructNotes is a note-taking application for students and educators that supports math, code, diagrams, and a live markets & news panel. We aim to collect only the information we need to provide the Service, and we do not sell your personal information.

By using the Service you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Information we collect

Information you provide

• Account information — your email address, an optional display name, and, if you register with a password, a password that we store only in securely hashed form (we never store your plaintext password). If you register with an access or invite code, we record that the code was used.
• Your content — the notes, text, math, code, images, drawings, and other materials you create, together with the workspaces and folders that organize them, and any share links you generate.
• Billing information — if you subscribe to a paid plan, our payment processor collects and processes your payment details. We receive only limited billing status (such as your plan, subscription state, and a customer/subscription identifier); we do not receive or store your full card number.
• Communications — messages, feedback, and support requests you send us through the contact form or by email, including your email address and message contents.

Information from Google when you sign in with Google

StructNotes offers “Sign in with Google” as an optional way to create and access your account. If you choose it, Google authenticates you and, with your consent, shares a limited set of profile information with us. We request only basic profile and email scopes, and we receive:

• your email address and whether it is verified — used as your unique account identifier and to contact you about your account;
• your basic profile information — your name and profile picture (avatar), used to set up and personalize your account and to display who you are in the app (for example, in collaboration); and
• your Google account identifier — an opaque ID used to link your StructNotes account to your Google sign-in so you can log back in.

We do not request or access your Google contacts, Gmail, Drive files, calendar, or any other Google service data, and we do not post anything to your Google account. You can review and revoke StructNotes’ access at any time in your Google Account’s security & connected-apps settings.

Information collected automatically

• Usage and diagnostic data — server logs containing your IP address, the requested route, timestamps, browser/user-agent information, and a request identifier, plus performance and error information used to keep the Service reliable and secure.
• Error reports — if something breaks in your browser, a limited error report (an error message, stack trace, and the page URL) may be sent to us to help us diagnose and fix it.
• Cookies — see the Cookies section below.

2. How we use information

• to create, authenticate, maintain, and secure your account (including verifying you through Google sign-in when you choose it);
• to provide, operate, and improve the Service and to store and sync your content, including real-time collaboration and exports;
• to personalize your experience — for example, displaying your name and profile picture in the app;
• to operate optional features you invoke (for example, translation and currency conversion);
• to process subscriptions and payments through our payment processor;
• to monitor performance, diagnose errors, prevent fraud and abuse, and enforce our Terms;
• to respond to your messages and support requests; and
• to comply with legal obligations.

We do not sell your personal information, we do not use it for third-party advertising, and we do not use your content or your Google profile information to train advertising or unrelated machine-learning models.

3. Limited Use of Google user data

StructNotes’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, the Google account information we receive is used only to provide and improve the features described in this Policy (creating and securing your account and personalizing your experience). We do not transfer or sell this information to third parties except as needed to provide or improve the Service, for security or legal reasons, or as part of a merger or acquisition; we do not use it for advertising; and we do not allow humans to read it unless we have your consent for specific items, it is necessary for security or to comply with the law, or the data has been aggregated and anonymized.

4. Cookies

We use a single essential cookie to keep you signed in (your authenticated session). It is required for the Service to function. We do not use advertising or cross-site tracking cookies. Because our cookie is strictly necessary, we do not display an advertising-consent banner.

5. Service providers and third parties

We share limited information with service providers that process it on our behalf, only to run the Service:

• Hosting and infrastructure — reputable cloud providers host the Service, store your account data and content, and help us keep it secure and reliable.
• Sign-in with Google — if you choose Google sign-in, Google handles authentication and provides the limited profile information described above.
• Payment processing — a third-party payment processor securely handles subscription payments and billing.
• Translation — when you use the translation feature, the specific text you select is sent to a third-party translation service to perform the translation.
• Exchange-rate and market data — the currency converter and markets panel fetch public financial data. These requests are made from our servers and do not include your personal information.
• Email delivery — messages you send through the contact form are delivered to us by email.

We may also disclose information if required by law or valid legal process, to protect our rights, safety, or property or that of our users or the public, or in connection with a merger, acquisition, financing, or sale of assets (in which case we will require the recipient to honor this Policy). Embedded blocks you add (such as videos or drive links) load from their providers, whose privacy practices govern that content.

6. Where your data is stored and international transfers

Your information is stored and processed by our hosting and service providers on our behalf. Depending on the providers involved and where they operate, your information may be stored or processed in countries other than the one you live in, which may have data-protection laws different from those in your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

7. Security

We take reasonable technical and organizational measures to protect your information, including storing passwords only in a hashed form using a strong, industry-standard algorithm, encrypting data in transit (HTTPS), enforcing authentication and per-user access controls, and rate-limiting sensitive requests. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Sharing links

If you create a share link for a note, anyone who has that link can access the note according to the permission you set (view or edit) until you revoke the link. Share links are only as private as the people you give them to, so share only with people you trust and revoke links you no longer need.

9. Data retention and deletion

We keep your account information and content for as long as your account is active. You can delete individual notes and workspaces within the app at any time, and you can request deletion of your entire account and its associated data by contacting us at the address below. When you delete your account, we remove your content and personal information from our active systems; residual copies may persist briefly in routine backups before being overwritten, and we may retain limited records where required for legal, security, or accounting purposes. Diagnostic logs are retained only for a limited period.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, or to withdraw consent. You can update much of your profile within the app, revoke Google access from your Google Account settings at any time, and contact us to exercise any other right. To make a request, use the contact details below; we will respond as required by applicable law and will not discriminate against you for exercising your rights.

11. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Where the Service is used in an educational setting, the responsible institution is accountable for obtaining any required consents and for compliance with applicable student-privacy laws. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice within the Service. Your continued use of the Service after an update takes effect constitutes acceptance of the revised Policy.

13. Contact

Questions or requests about your privacy, including data-access or deletion requests, can be sent through the contact page or by email to hello@structnotes.io. StructNotes is operated by structnotes.io.