PRIVACY & LEGAL
Clear terms for
private information.
Privacy policy
omaMac (Finnish Business ID 2025358-2, VAT ID FI20253582) operates KotNote and is the controller for account identifiers, authentication and security events, subscription and billing records, support communications, requested integration metadata, and first-party service analytics. Users control their encrypted Vault content. We process account and service data to perform the service contract; security and limited operational analytics for our legitimate interests in protecting, maintaining and improving KotNote; billing and retention data to meet legal obligations; and optional integrations at the user’s request. We do not sell personal data, build cross-site advertising profiles, or use Vault content for behavioural advertising.
First-party service analytics
When traffic passes through Cloudflare, nginx accepts the CF-Connecting-IP header only from Cloudflare’s published trusted networks and forwards the validated client IP to KotNote. KotNote records the requested route without query parameters, page-load count, visitor count, validated IP address and a one-way visitor hash, Cloudflare’s two-letter country code, and UTC date. These data provide user and visitor statistics, requested-page and popular-page totals, country aggregates, and abuse or capacity diagnostics. Raw request bodies, Vault content, clip contents, search terms, URL query strings, advertising identifiers and third-party tracking IDs are not included. IP-level daily aggregates are visible only to authorized administrators and are automatically deleted after 90 days. Global Privacy Control disables the marketing-page beacon; essential app security logging may still operate.
Terms of service
Users must be able to contract, protect credentials and recovery codes, provide accurate information and use KotNote lawfully. Users own their content and grant only the limited rights needed to provide requested functions. Finnish law applies without removing mandatory consumer protections.
Cancellation, refunds and VAT
Subscriptions renew until cancelled through Manage billing & invoices, normally at the end of the paid period. Consumers generally have a 14-day withdrawal right for online services; proportionate charges may apply where immediate performance was expressly requested. Refund requests go to [email protected]. Stripe collects billing and tax details and supplies invoices bearing omaMac’s legally required seller and VAT information.
Recipients, transfers and retention
Access is limited to authorized omaMac personnel and processors needed to operate requested functions. Named providers include Cloudflare for traffic delivery, security and client-IP or country headers; Stripe; Google Cloud Storage; Let’s Encrypt; and contracted hosting and transactional-email providers. Where data leave the EEA, an applicable adequacy decision or contractual and supplementary safeguards are required. Sessions last up to 30 days; IP-level analytics 90 days; audit data ordinarily 12 months; support cases 24 months; accounting and VAT evidence at least six years; encrypted backups follow 7 daily, 4 weekly and 12 monthly retention.
Your data-protection rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent where consent is the basis, without affecting earlier processing. KotNote does not make legal or similarly significant decisions solely through automated processing. Requests can be made through Account security or [email protected]. We may verify identity before responding. You may complain to the Office of the Data Protection Ombudsman in Finland or your local supervisory authority.
Incidents and accessibility
KotNote contains and investigates incidents, notifies authorities within 72 hours where required, notifies affected people without undue delay where high risk is likely, and completes corrective action. KotNote targets WCAG 2.2 AA; accessibility feedback goes to [email protected].
Operator and contact
omaMac
Finnish Business ID: 2025358-2
VAT ID: FI20253582
Vaahteratie 5
06750 Porvoo
Finland
[email protected]