Privacy Policy

Last updated: October 22, 2026
Effective date: October 22, 2026

1. Introduction and Scope

This Privacy Policy explains how Notari Labs Inc. ("Notari Labs," "Notari," "we," "us," or "our") collects, uses, discloses, retains, and protects personal information through notarilabs.com, the Notari online store, the Notari iOS application, Notari-branded recording devices, share-link pages, support channels, and related services (collectively, the "Services"). Certain provisions below apply only to the website and online store or only to the Notari iOS app, as expressly stated.

This Policy covers the Notari app and its associated digital services offered to eligible users in the United States, the United Kingdom, Canada excluding Quebec, and Australia, together with our website, online store, share-link pages, and support channels. Eligibility and service availability are described in our Terms of Service. Notari physical products are currently offered for sale and delivery only in the United States.

Our service availability restrictions do not exclude privacy rights that apply to personal information we process, including information about people who do not have a Notari account, such as people who appear in a recording or who open a share link. The regional disclosures in Section 13 supplement this Policy where the relevant laws apply. Independent third-party websites, app stores, and services may have their own privacy notices covering their separate processing activities.

2. Information We Collect

2.1 Account, Profile, and Historical Waitlist Information

We collect information such as your email address, email-verification records, authentication tokens, account preferences, consent records, and Notari devices associated with your account. If you set a password, we store it only as a one-way cryptographic hash and never in readable form. We also keep session and sign-in records, including session creation, last-activity, and expiration times, and password-change and password-reset events, to secure your account. We do not collect or upload your phone contact list.

If you previously joined our waitlist or emailed us to request an invitation, we collected your email address and any other information you voluntarily included in the request. We retain historical waitlist records and invitation and promotional-grant records linked to existing accounts as described in Section 9. We use the account-linked records to maintain and verify credits or plan benefits already granted. Registration no longer requires an invitation code, and we do not collect invitation codes for new account registration.

Account creation is free and does not require an invitation code. No hardware purchase, enterprise agreement, subscription, fee, or other payment is required to create an account. Previously joining the waitlist did not create a Notari account.

2.2 User Content

Depending on the features you use, we process audio recorded directly through the iPhone microphone, audio synchronized from a paired Notari recording device, audio files selected through the iOS document picker, transcripts, speaker labels, summaries, notes, prompts, corrections, content you choose to publish through share links, and other content you create or submit through the app. This content may include information about other people.

New accounts may also include sample recordings, transcripts, and summaries provided by Notari to demonstrate the app's features. Sample content does not contain your personal information, and you may delete it at any time.

2.3 Speaker Separation

Notari may process voice characteristics within an individual recording to distinguish speakers and assign generic speaker labels. This processing is limited to separating speakers within the selected recording. The current iOS release does not create or retain persistent voice profiles or voiceprints, save voice embeddings across recordings, identify a person across recordings, or provide biometric voice-identification features.

2.4 Device, Network, and Usage Information

When you use the Notari iOS app, we may process information necessary to operate and secure the Services, including your app version, operating-system version, language, IP address, account and device associations, Notari device serial number and firmware version, connection and synchronization status, upload and transfer status, server-request records, and security events.

The app may generate redacted diagnostic logs locally on the device. The current iOS release does not provide a function for transmitting those logs to Notari. The app does not collect GPS location, advertising identifiers, behavioral analytics, or third-party crash reports.

2.5 Permissions and Integrations

The current iOS release may request access to:

Users may also select an existing audio file through the standard iOS document picker. The app receives access only to the file selected by the user.

The current iOS release does not request access to the camera, photo library, location, contacts, calendar, notifications, or App Tracking Transparency.

2.6 Website and Online Store Information

When you purchase physical products through notarilabs.com, we may collect order, product, warranty, billing status, shipping address, delivery, return, fraud-prevention, support, and customer-service information. Payment-card details are generally collected directly by Shopify or another payment provider and are not stored directly by Notari.

This subsection applies only to the website and online store. App Store purchases made through the iOS app are described in Section 2.8.

2.7 Website Cookies and App Tracking

Website providers may include Shopify and advertising, analytics, customer-review, and email-marketing providers disclosed through our website cookie controls. These website practices apply only to notarilabs.com and the online store. Share-link pages do not use advertising or analytics cookies.

The Notari iOS app does not display advertising, contain advertising SDKs, use third-party behavioral analytics or crash-reporting SDKs, or engage in tracking as defined by Apple. Website advertising and analytics practices apply only to notarilabs.com and the online store.

2.8 App Store Purchases and Subscription Information

When you purchase a subscription or credit pack, or restore an eligible purchase through the App Store, Apple processes the payment. Notari does not receive your full payment-card number, card security code, or Apple Account password through Apple In-App Purchase.

We receive and process transaction and subscription information from the app and Apple to verify purchases and provide the associated services. Depending on the transaction, this may include product identifiers, transaction and original transaction identifiers, purchase and expiry dates, subscription and renewal status, refund or revocation status, price and currency, signed transaction and renewal records, and an app-specific account token that links the purchase to your Notari account. We also maintain records of the resulting subscription benefits, credit balances, allowance allocations, per-recording AI allowance usage, and usage deductions.

We use this information to verify transactions, activate and maintain subscription benefits, allocate purchased credits and usage allowances, restore eligible purchases, prevent duplicate processing and fraud, provide billing support, reconcile payments and refunds, and comply with applicable legal and accounting obligations.

We exchange the information necessary to process and verify App Store purchases with Apple, including an app-specific account token when you make a purchase. Apple processes information under its own applicable terms and privacy policy. Our contracted infrastructure and service providers may process relevant transaction information on our behalf where necessary to provide these services and subject to the safeguards described in Section 7.

2.9 Share Links

When you create a share link, we store a published copy of the content you choose to include, which may consist of the recording's title, transcript text, speaker labels, timestamps, and summary, together with the link's status and the times it was published, updated, or turned off. Audio is not included in share links.

When someone opens a share link, we process technical information such as IP address, browser and device information, and request records to deliver the page, prevent abuse, and protect the Services. Viewers do not need a Notari account, and we do not use this information for advertising or to build profiles of viewers.

2.10 Redemption Codes and Device Benefits

Redemption codes are always free, and redeeming one never involves a payment, so we do not collect any payment information when you redeem a code. When you redeem a code, we process the code, the benefits it grants (such as plan time, promotional Credits, or a device benefit), their duration and expiration dates, and the time and result of each redemption. We use these records to provide your redemption history and to prevent duplicate or fraudulent redemptions.

When you pair a Notari device or redeem a device benefit, we process the device serial number, its first activation time and binding history, the benefit coverage periods that apply to the device, and, for each recording synchronized from the device, whether that recording qualified for a device benefit at the time its upload was accepted. Device benefits are linked to the physical device rather than to an account, so these records may be used to determine benefit eligibility after the device is bound to another account. A later owner of the device does not receive access to your files or account information.

3. Sources of Information

We collect information:

4. How We Use Information

We use personal information to:

5. Cloud Processing and AI Providers

Notari uses the following cloud and AI service providers to deliver requested app functionality:

Audio is provided only to services needed for transcription, speaker separation, storage, and transcript processing. Transcripts, notes, prompts, and related text may be provided to the AI provider selected by the user to generate summaries or answers. Email addresses are provided to Amazon SES only as necessary to deliver verification messages.

No AI training without a separate opt-in: Notari and its current cloud and AI service providers do not use recordings, transcripts, summaries, notes, prompts, share-link content, or other User Content to train general-purpose or foundation AI models. Notari will not introduce such training without first providing a separate, specific notice and obtaining the user’s explicit, informed consent.

6. User Responsibility for Recordings

You must provide any required notice and obtain all permissions before recording, uploading, transcribing, separating speakers, analyzing, or sharing content involving another person. Laws governing recording, wiretapping, confidentiality, employment monitoring, and privacy vary and may require every participant’s consent. Notari does not determine whether your recording is lawful. These user responsibilities do not limit Notari’s own obligations under applicable privacy and data protection laws.

If you believe that a recording, share link, or other content processed through Notari contains your personal information, you may contact support@notarilabs.com even if you do not have a Notari account. We may request information reasonably necessary to verify your identity, locate the information, and assess your request. In responding, we will consider the rights and privacy of other people and any applicable legal restrictions.

6.1 Share Links

If you create a share link, anyone who has the link can view the content you choose to include, without signing in. Audio is not included in share links. Share-link pages are marked to ask search engines not to index them. You can turn a link off at any time, and links stop working when the related recording or your account is deleted. We cannot control copies or further disclosures made by people with whom you share a link. Before sharing content that includes information about other people, make sure you have any required notices or consents.

The Services do not provide public posting, community features, comments, private messaging, following, or other user-to-user interaction. Apart from content you choose to publish through a share link, User Content is not made available to other users through the Services. Notari and the relevant service providers process User Content as necessary to provide the requested features and for the other limited purposes described in this Privacy Policy. Any disclosure is subject to the restrictions described in this Privacy Policy and applicable law.

If Notari introduces additional sharing or community features in the future, we will update this Privacy Policy before those features become available.

7. How We Disclose Information

We may disclose personal information to:

Where a service provider processes personal information on our behalf, we require contractual restrictions on its use of that information and confidentiality and security protections appropriate to the processing and applicable law. Some recipients, including public authorities and certain independently operated services, may process information under their own legal responsibilities, as described in this Policy. Notari remains responsible for its own obligations under applicable privacy and data protection laws.

We do not sell recordings, transcripts, summaries, notes, prompts, share-link content, or other User Content. The Notari iOS app does not share personal information for cross-context behavioral advertising.

7.1 Website and Online Store Relationship with Shopify

Our online store is hosted by Shopify. Shopify collects and processes information about access to and use of the store to provide commerce, checkout, security, fraud-prevention, analytics, and related services. Depending on the Shopify features and settings used, Shopify may also process information for purposes described in its own notices. For more information about Shopify’s processing and privacy choices, see the Shopify Consumer Privacy Policy.

This section applies only to notarilabs.com and the Notari online store. Shopify is not used to process purchases within the Notari iOS app and is not involved in share-link pages.

8. Cookies and Privacy Choices

You can use our website privacy controls to manage your cookie choices and change them later. For visitors in the United Kingdom, we obtain consent before using advertising cookies and other cookies or similar technologies that require consent under applicable law. You can accept or reject optional cookies through those controls. Where a legal exception permits a technology to be used without consent, we use it only within the scope and conditions of that exception. Browser settings provide additional cookie controls.

Where required by applicable law, we treat a qualifying Global Privacy Control signal as a request to opt out of sale or sharing for the browser or device that sends it. To submit a privacy request, including an applicable request to opt out of sale, sharing, or targeted advertising, contact support@notarilabs.com.

Blocking cookies may affect site functions. Advertising opt-outs are device- and browser-specific unless we can associate the choice with your account. We may still use contextual advertising and measure activity in ways permitted by law.

9. Data Retention

Historical waitlist information remains subject to the original retention schedule: Notari deletes the separate waitlist record within 30 days after an invitation is issued, a request is withdrawn, or the waitlist closes, unless the information becomes part of an account the user creates or limited retention is required for security, fraud prevention, dispute resolution, or law. You may request deletion of your historical waitlist record by emailing hello@notarilabs.com.

Historical invitation and promotional-grant records linked to an existing account are retained as account information to maintain and verify benefits already granted, including their original amounts, validity periods, and usage history. These records follow the account-deletion and limited-retention rules below. Keeping these records does not require a user to provide an invitation code again.

Account information and User Content are retained while the user’s account remains active, unless the user deletes particular content or deletes the account.

When a user deletes a recording or note, the item and its associated audio, transcript, speaker labels, summaries, prompts, share-link content, and related data become unavailable promptly and are permanently deleted from active production systems and backups within seven days. Any share link for that item stops working immediately.

When a user turns off a share link, the link stops working immediately. The published copy is kept with the related recording so the user can enable sharing again, and it is permanently deleted together with that recording or account under the schedules in this section. Technical records of share-link visits are kept only as long as reasonably necessary for security and abuse prevention.

When a user confirms account deletion through Account Management in the app, the account is disabled immediately and all of its share links stop working. The account and all associated recordings, transcripts, summaries, notes, prompts, speaker labels, share-link content, device associations, and other User Content are permanently deleted from active production systems and backups within seven days.

Session records are kept until the session expires or is revoked, and for a limited period afterward for security purposes. Redemption records and device-benefit records, including device serial numbers, activation and binding history, and coverage periods, are kept for as long as reasonably necessary to administer the benefits, which follow the physical device, and to prevent duplicate or fraudulent grants. After account deletion, these records are no longer linked to your account's User Content, and only the limited information described below is retained.

Website order, warranty, App Store transaction and subscription, tax, fraud-prevention, security, dispute, and legal records may be retained longer when reasonably necessary for accounting, warranty service, security, legal compliance, or legal claims. Retention periods depend on the type of record, applicable legal requirements, and any outstanding dispute or legal hold. Following account deletion, we retain only the limited information necessary for these purposes, restrict its use accordingly, and delete or de-identify it when retention is no longer necessary. Any such limited retention does not include recordings, transcripts, summaries, notes, share-link content, or other User Content unless retention is required by law.

Deleting your Notari account does not automatically cancel a subscription billed by Apple. You can manage or cancel it through your Apple subscription settings. Apple retains information it processes under its own applicable privacy notices and legal obligations; Notari account deletion does not itself delete records held independently by Apple.

10. Security

We use reasonable administrative, technical, and physical safeguards designed for the nature of the information, including access controls, password hashing, encryption in transit and at rest where appropriate, unguessable share-link tokens, monitoring, provider review, and deletion procedures. Sessions expire after 14 days of inactivity and no later than 90 days after sign-in. Changing your password signs out your other sessions and invalidates outstanding password-reset requests. No method of transmission or storage is completely secure. You are responsible for protecting your account credentials and share links and promptly reporting suspected unauthorized access.

11. Data Location and International Processing

Notari primarily hosts its current production systems in the United States. Data residency generally refers to storage of designated customer content at rest; it does not necessarily mean that all processing, support, security operations, website billing, website analytics, or third-party AI processing occurs exclusively in that region. Share-link pages may be delivered to viewers in any country.

For transfers of personal information to our service providers that are subject to the UK GDPR’s international transfer rules, we rely on the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum. These safeguards cover the relevant transfers for hosting, transcription, speaker diarization, text refinement, summarization, and AI question-answering. You can request information about these safeguards, including a copy where applicable, by contacting support@notarilabs.com.

12. Your Controls and Requests

Depending on your account and applicable law, you may access or correct account information; set or change your password; edit, search, or delete notes and recordings; turn share links on or off; view your redemption history; change app permissions; or initiate account deletion through Account Management. Confirming account deletion disables the account immediately and permanently deletes the account and associated User Content from active production systems and backups within seven days, subject only to the limited legal-record exceptions described in Section 9.

Users may withdraw permission for Microphone, Bluetooth, Local Network, or Speech Recognition access at any time through iOS Settings. Withdrawing a permission stops future access to that resource but may prevent the related feature from functioning. To withdraw another optional consent or exercise a privacy right, users may use the available in-app controls or contact support@notarilabs.com. Withdrawal does not affect processing lawfully completed before the consent was withdrawn.

You may contact support@notarilabs.com to request access, correction, deletion, or another applicable privacy right, whether or not a self-service control is available. Please describe your request and provide enough information for us to locate the relevant records. We may request information reasonably necessary to verify your identity or authority to act for someone else. We will respond within the period required by the law applicable to your request and explain any refusal, applicable exception, or permitted extension, together with available complaint or review options. Contacting support is not required to initiate account deletion in the app.

13. Regional Privacy Disclosures

Where a U.S. state privacy law applies, residents may have rights to know or access personal information; obtain a portable copy; correct inaccuracies; delete information; opt out of sale, targeted advertising, or certain profiling; limit certain uses of sensitive information; appeal a denial; and receive nondiscriminatory treatment. Rights and exceptions vary by state. Submit a request to support@notarilabs.com or through available account or website controls. If we deny an appealable request, our response will explain how to appeal.

13.1 California Notice at Collection and Rights

The categories of personal information we may collect are identifiers; customer records; commercial information, including redemption and benefit records; internet or electronic-network activity, including share-link visit records; approximate location derived from IP where applicable; audio information; User Content; and sensitive personal information such as account credentials and communications content. We collect and retain these categories for the purposes and periods described in Sections 4 and 9.

Identifiers, Commercial Information, Internet Activity, Approximate Location, and Related Inferences

Disclosed for business purposes: Cloud, commerce, payment, security, analytics, support, fulfillment, and professional providers.

Sold or shared for cross-context advertising: Website advertising and analytics partners, subject to applicable opt-out rights. The Notari iOS app and share-link pages do not sell or share these categories for cross-context behavioral advertising.

Audio Recordings, Imported Audio, Transcripts, Speaker Labels, Summaries, Notes, Prompts, Corrections, and Share-Link Content

Disclosed for business purposes: Approved cloud, storage, AI, transcription, speaker-separation, security, and infrastructure providers necessary to provide user-requested features. Share-link content is also made available to people who have a link the user created.

Sold or shared for cross-context advertising: No.

Website and Online Store Payment Information

Disclosed for business purposes: Payment processors; Notari generally does not receive full card details.

Sold or shared for cross-context advertising: No.

California residents may request to know, access, correct, or delete covered information; opt out of sale or sharing; limit use or disclosure of sensitive information where the right applies; and receive equal treatment. We use sensitive information only for reasonably expected Services, security, quality, compliance, and other permitted purposes unless we provide a right to limit. Use the website privacy controls, a qualifying Global Privacy Control signal where required by applicable law, or contact support@notarilabs.com to exercise applicable rights.

If the California Consumer Privacy Act applies to Notari’s processing, we will confirm receipt and respond within the periods required by law. Notari does not knowingly sell or share personal information of consumers under 16. The Services are not offered to anyone under 18.

13.2 United Kingdom

This section applies where UK data protection law applies to our processing of your personal data.

Our role

Our role depends on the processing activity.

Notari acts as a controller for account and historical invitation management, password and session security, redemption and device-benefit administration, share-link delivery and security, customer support, service security, and other activities for which we determine the purposes and essential means of processing personal data.

For recordings, transcripts, and related AI content, users choose what to submit, which features to request, and what to publish through share links. We process this content to provide the requested storage, transcription, speaker diarization, text refinement, summarization, AI question-answering, and sharing services, using the providers described in this Privacy Policy. We do not claim ownership of users’ content or use it to train AI models.

Where a customer acts as a controller and Notari processes personal data solely on that customer’s behalf and in accordance with their instructions, Notari acts as a processor for that processing. This role does not extend to activities for which Notari independently determines the purposes and essential means of processing.

Legal bases where we act as a controller

We rely on the following legal bases, as applicable to the activity:

Information about other people in recordings

Recordings and related content may contain personal data about people other than the account holder. Users must ensure that their recording, uploading, sharing, and use of that content are lawful, provide any required notices, and obtain any permissions or consents required by applicable law.

Where a customer acts as a controller and we act as their processor, the customer is responsible for determining the applicable legal basis and, where relevant, an additional condition for processing special-category data. We remain responsible for our own obligations as a processor.

A user’s acceptance of our Terms of Service does not constitute consent on behalf of other people. These user responsibilities do not exclude or limit Notari’s own obligations under applicable data protection law.

Your rights

Subject to the conditions and exceptions in applicable law, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, and a portable copy of certain data. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Contact support@notarilabs.com to exercise your rights. Where we process the relevant data as a processor for a customer, we will direct your request to the relevant controller or assist that controller in responding, as appropriate. You may contact us even if you do not have a Notari account.

Your right to object

You may object, on grounds relating to your particular situation, to processing based on legitimate interests. You may object at any time to the use of your personal data for direct marketing, including related profiling.

Complaints and international processing

You may raise a privacy concern with us at support@notarilabs.com. You also have the right to complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.

Information about international processing and applicable transfer safeguards is provided in Section 11.

13.3 Canada

Where applicable Canadian privacy law applies, you may request access to personal information we hold about you, ask for inaccuracies to be corrected, and raise questions or complaints about our handling of that information. Where processing depends on consent, you may withdraw consent subject to applicable legal or contractual restrictions and reasonable notice. We will explain any resulting limits on the features we can provide.

Personal information may be processed outside Canada as described in Section 11 and may be accessible to courts or public authorities under the laws of the relevant country. Our use of service providers does not remove our accountability under applicable Canadian privacy law.

To make a request or complaint, contact support@notarilabs.com and identify the matter as a privacy request. Depending on the law that applies, you may also raise a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or the relevant provincial privacy authority.

Although our app and associated digital services are not currently offered to residents of Quebec, this service availability restriction does not exclude any rights under Quebec law that apply to personal information we process or to our activities.

13.4 Australia

Where the Australian Privacy Act and Australian Privacy Principles apply to our handling of your information, you may request access to personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant, or misleading.

You may submit a privacy complaint to support@notarilabs.com. Please describe the issue and provide contact details so that we can respond. We will assess the complaint, request any reasonably necessary information, and explain our response and available next steps within a reasonable period and any applicable legal deadline. If the complaint is not resolved, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au/privacy/privacy-complaints.

Information about overseas processing locations and recipients is provided in Sections 5, 7, and 11. Nothing in this Policy limits rights or remedies that cannot be excluded under applicable Australian law.

14. Children and Eligibility

The Services are intended only for people who are at least 18 years old or the age of legal majority where they live, whichever is higher. We do not knowingly offer accounts to or collect personal information directly from children. If you believe a child provided information, contact us so we can investigate and delete it where appropriate.

15. Health and High-Risk Information

Notari is not currently offered as a HIPAA-compliant service, does not offer a Business Associate Agreement, and is not intended to receive protected health information or to provide medical care. Do not submit or share information requiring HIPAA, regulated child-data, or similarly specialized handling unless Notari has executed an appropriate written agreement for that use.

Recordings and related content may contain sensitive information about you or other people, including information subject to special protections under the laws of the United Kingdom, Canada, or Australia. Our restrictions on submitting such information do not remove Notari’s obligations under applicable law. If you believe such information has been submitted or shared inappropriately, contact support@notarilabs.com so that we can assess the issue and take appropriate action.

16. Changes to This Policy

We may update this Policy as the Services, providers, or law change. We will post the updated version and effective date and provide additional notice or obtain consent when required.

17. Contact

For privacy requests, questions, or complaints, contact Notari Labs Inc. at support@notarilabs.com. Please indicate that your message concerns privacy so that it can be routed to the person responsible for handling privacy matters. You may also write to us at the postal address below.

For questions about an earlier invitation or to request deletion of a historical waitlist record, contact hello@notarilabs.com. You do not need an invitation to register.

Notari Labs Inc.
1209 Orange Street
Wilmington, DE 19801
United States