Privacy Policy

1. Who we are

COX AI CO. LLC, a Missouri limited liability company doing business as Nodetaker, is responsible for the personal information it processes through the Nodetaker app, website, purchases, and support. Contact hello@nodetakerapp.com with privacy questions or requests.

This policy describes the founding-beta app and the Nodetaker website. Payment and other independent services also have their own privacy policies.

2. Your local vault

The app reads and writes notes, relationships, and media in a folder you choose. Core editing does not require a Nodetaker account. The app does not automatically upload your vault, note text, filenames, paths, or media to us, and we do not operate a cloud vault-sync service.

If you put the folder in iCloud Drive, Dropbox, or another synced location, that provider may receive the files under your settings and its policies. Exports remain on your device until you choose to share them. Sharing an export with an AI or another service is your decision and is governed by that service's terms.

The app stores interface preferences such as theme and sidebar state locally. It does not include advertising trackers or automatic uploads of diagnostic reports.

3. Downloads, updates, and web links

Downloading the app and checking for updates contacts our release hosting on GitHub and its delivery infrastructure. Those services receive connection information such as your IP address, request time, and requested resource. An update request does not include your vault content.

When you open an external web link, the destination receives the connection information your browser sends. Its privacy policy applies.

4. Feedback and support

If you email us, we receive your email address, message, and anything you choose to include. The in-app feedback form sends the feedback category, subject, message, a random request reference, and a reply email if you provide one. App version and platform are included only when you select that option.

Feedback does not automatically attach notes, vault paths, filenames, media, or raw errors. A diagnostic report is exported locally only when you request it; you decide whether to share it. Reports contain app and system details and aggregate workspace counts, not note text or media.

When the in-app relay is available, messages pass through our website and Resend for email delivery. Feedback text and reply addresses are not stored in the website database, but are processed by the email service and kept in our support correspondence. To limit abuse, the relay uses temporary counters and a keyed representation of the connection IP address, rather than storing the plain IP in those counters. Expired counters are removed during subsequent feedback processing.

5. Website visits and essential storage

Our website is hosted through OpenAI Sites on Cloudflare infrastructure. Hosting and security providers process ordinary request information, including IP address, requested URL, browser information, and time, to deliver and protect the website. We do not add advertising pixels or cross-site marketing trackers to the Nodetaker website.

Where restricted downloads require access, an essential access cookie remembers successful entry for up to seven days. We keep aggregate download totals for the app and supporting materials, rather than a named download history. Essential access storage is not used for advertising. You can clear cookies in your browser, which may require you to enter access details again.

6. Purchases and agreement records

Lemon Squeezy handles checkout as merchant of record and processes payment, billing, tax, fraud-prevention, and transaction information under its own privacy policy. We can receive order details such as your name, email, product, purchase amount, and payment or refund status to deliver the app, answer questions, and keep business records. We do not collect your full card number or bank login on this website.

Before sending you to checkout, we record a random acceptance reference, the time, and the exact policy version and text you agreed to. The reference is passed to Lemon Squeezy so it can accompany the order's checkout metadata. We do not add your note content, card information, or IP address to this agreement record. An acceptance record alone does not mean that a payment succeeded.

Lemon Squeezy sends signed payment and refund notifications to our website. We retain the order ID, product ID, payment or refund status, update time, a cryptographic digest of the order's download reference, and a link to an existing agreement record when available. We do not retain the raw payment notification, your name, email, or billing details in the website's download-access table. A full refund ends website download access for that order.

The download link in your confirmation or receipt includes a unique order reference. Treat it as a personal access link and avoid sharing it. When you open it, the website stores an essential access cookie for up to seven days, removes the reference from the destination page URL, and checks the purchase record before serving a download. Hosting infrastructure may process the initial link as part of ordinary request handling. No Nodetaker account is required.

7. Why we use information and who receives it

We use information to supply the app, process support and refund requests, maintain security, prevent abuse, keep agreement and business records, and comply with legal obligations. Where a legal basis is required, these activities rely on performing our contract, our legitimate interests in operating and protecting the business, legal obligations, or consent where required.

Information is shared with the hosting, release-delivery, payment, and email providers needed for those activities, and with professional advisers or authorities where reasonably necessary or legally required. We do not sell personal information or share it for cross-context behavioral advertising. Buying the app or agreeing to its terms does not sign you up for marketing emails.

8. Retention and security

Your local vault remains under your control. We retain support correspondence while needed to answer and document requests, and purchase and agreement records as needed for accounting, tax, fraud prevention, and legal claims. Retention depends on the record, applicable legal obligations, and whether a dispute is active. We delete or de-identify information when it is no longer needed, except for permitted legal retention. Our providers may have separate retention obligations.

We use reasonable access and security measures appropriate to the information, but no system is completely secure. Keep independent backups and avoid sending sensitive information in support messages.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information; restrict or object to processing; or withdraw consent. Email hello@nodetakerapp.com to request help. We may ask for proportionate information to verify the request and explain any legal retention requirement or other applicable exception.

You can delete or move your local vault yourself. Deleting it does not automatically delete support or transaction records. For information Lemon Squeezy or another provider controls independently, you may also need to contact that provider. You may complain to your local privacy regulator where applicable.

10. International processing and children

We operate in the United States. Service providers may process information in the United States or other countries. Where required, transfers must use applicable safeguards; privacy rights under local law remain available.

The app is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has sent us personal information so we can investigate and address it.

11. Policy changes

We will date revisions and keep a dated copy available. If our data practices change materially, we will provide appropriate notice and obtain consent where required before making a change that depends on it.