Privacy Policy
No ads. No trackers. No data sales. Your notes are yours.
Last updated: September 2026
What we collect
- Account data: your name, email, and password hash (via secure email/password authentication).
- Your content: documents, files, and settings you create. Stored on managed Postgres and Cloudflare R2.
- Operational data: API key hashes and last-used timestamps, strictly for security.
What we never do
- No advertising, analytics trackers, or third-party cookies.
- We never sell or share your content with anyone.
- Published documents are public by your choice only — everything else requires your session or API key.
We send transactional email only (verification, password reset) via Resend. No newsletters unless you explicitly opt in.
Your control
- Delete documents any time; empty trash to remove them permanently.
- Rotate or delete your API key instantly from Settings.
- Delete your entire account and all data by emailing hello@aago.social from your account address.
Changes
If this policy changes materially, we'll update the date above and note it here. Questions: hello@aago.social.