<- Back To Agreements

Noteroom Legal

Privacy Rights (UK + US/CA)

Last updated: 5 March 2026

1. How To Submit A Request

Email support@noteroom.app with subject "Privacy Request" and include the account email, request type, and scope.

For account holders, in-app account controls (export/delete) remain the fastest route where available.

We do not charge a fee for standard verified rights requests unless allowed by law (for example, repetitive or manifestly unfounded requests).

2. UK Rights

  • Access your personal data
  • Correct inaccurate data
  • Request erasure in eligible situations
  • Restrict or object to processing
  • Request portability for eligible data
  • Withdraw consent where processing is consent-based

You may complain to the UK ICO if unresolved.

3. US/California Rights

  • Know/access categories and specific pieces of personal information
  • Delete eligible personal information
  • Correct inaccurate personal information
  • Data portability where applicable
  • Opt out of sale/share where applicable (Noteroom does not sell personal information)
  • Non-discrimination for exercising privacy rights

Noteroom does not sell personal information or share personal information for cross-context behavioral advertising.

4. Verification And Response Times

We may verify identity before fulfilling requests to protect account security. Verification may include matching account credentials, confirmed email control, or additional evidence where risk requires.

Typical timelines are up to one month for UK requests and up to 45 days for applicable US state requests, with extensions where legally permitted.

5. Authorized Agents

Where legally available, you may use an authorized agent. We may request signed permission from the account holder and identity verification from both the user and agent before completing high-risk requests.

6. Appeals And Contact

If a request is denied, reply to the decision email to request internal review. We provide appeal handling guidance where required by law.

7. Non-Retaliation

We do not deny core service quality or retaliate against users for exercising lawful privacy rights, subject to lawful service and security limits.