Privacy

Privacy Policy

We store account data and transcription history so Note2Tabs works reliably. Audio is sent to our processing backend for transcription. Only upload content you have rights to use.

Access to your tabs and content

Tabs, transcriptions, and related metadata are stored so the service works. Our team may access created tabs and related content to provide support, troubleshoot issues, prevent abuse, and comply with legal obligations.

Security logging (including server errors and IP addresses for abuse prevention) may be recorded in server logs. This logging does not depend on analytics consent and is used solely to protect the service.

Support messages

When you contact us for support, we use the information you provide to answer your request and improve Note2Tabs. Please avoid including sensitive information that is not needed to resolve your issue.

Cookies and similar technologies

We use essential cookies to run the service. Product analytics are enabled by default, but PostHog is configured without persistent analytics cookies or local-storage identifiers. You can turn analytics off at any time from settings.

  • Essential cookies: authentication and session cookies required to sign in and keep your account secure.
  • An opt-out preference cookie is stored only when you turn analytics off.

With analytics enabled, PostHog may collect page views, product events, device and browser information, approximate location, and a short-lived in-memory identifier to help us improve Note2Tabs. Anonymous identifiers do not persist across browser reloads. When you sign in, analytics activity may be associated with your Note2Tabs account ID.

We may also use PostHog session replay to understand how the editor is used. Replays can include visible editor content, project names, notes, chords, fingerings, control changes, pointer activity, and canvas rendering. Account, authentication, settings, payment, administration, saved-tab library, and upload surfaces are excluded from replay. Network headers and request or response bodies are not recorded, and recorded URLs are stripped of query strings and private identifiers.

You can deny analytics and continue using core features (subject to rate limits and security protections). You can update this later in settings and request account deletion at any time.