Privacy Policy

The Pro and Classic license area verifies access with a one-time code emailed to the license owner. Codes expire after 10 minutes. An encrypted, short-lived code delivery record is used for sending; the login verifier is stored as a keyed hash. Sessions use a secure HTTP-only cookie, expire after 30 minutes of inactivity and last at most 12 hours. We retain Mac-release security records for up to 180 days and mail submission records for up to 14 days. Releasing a Mac sends a notification to the license email. This private area does not load session-recording analytics.

The Services provide product information, downloads, help content, purchases, licenses and subscription management. Payments are handled by a third-party payment processor, which acts as an independent controller for payment data; we never receive or store full card details. We update this Policy before enabling a material new data-processing activity.

Depending on how you use the Services, we may process:

• Information you provide: your name, email address, the contents of messages, and any files or information you send to us.
• Purchase and license information: the email address used at checkout, the license key issued to you, the plan purchased, the Macs a license is activated on (identified by a device identifier generated for that purpose), and the records our payment processor returns to us, such as amount, currency, country, payment status and refund status.
• License validation: the app contacts our server to check the license and its device limit. Offline access is limited by the latest successful validation and the end of the entitlement.
• Technical and security information: IP address, device and browser information, operating-system version, approximate location derived from IP, request time, pages or endpoints requested, and security or diagnostic logs.
• App diagnostic information: if you choose to send support information, information reasonably necessary to investigate the issue, such as the app version, macOS version, and error details.

Please do not send sensitive personal information unless it is necessary and requested for a specific support matter.

We use information to:

• provide, secure, operate, and improve the Services;
• process purchases and subscriptions, issue and validate licenses, apply the device limit of each license, and handle refunds, cancellations and payment disputes;
• respond to requests, support inquiries, and legal notices;
• detect, investigate, and prevent fraud, abuse, security incidents, and technical problems;
• comply with legal obligations and enforce our Terms; and
• establish, exercise, or defend legal claims.

NotchNook Pro 2.0 activates licenses issued for version 2.0. Version 1 licenses and subscriptions are managed separately.

Where a legal basis is required, we process personal information with your consent, to take steps you request or perform a contract, to comply with a legal obligation, or for legitimate interests such as service security, fraud prevention, support, and improvement. We balance those interests against your rights and expectations.

This version 2.0 website does not use advertising cookies. A temporary checkout request identifier helps prevent duplicate requests. Essential technical mechanisms may be used for security and operation. Stripe handles payment and applies its own privacy and cookie policies.

First-party purchase attribution may retain a signed, temporary record of the first and last non-direct source for up to 24 hours, using limited campaign parameters and referrer information. It supports purchase attribution without recording unrelated browsing. Language and currency preferences are separate from analytics consent.

Separately, with your consent where the law requires it, the website uses Microsoft Clarity to understand how visitors use it, through cookies and visit analytics. You can accept, reject or withdraw consent at any time; the Cookie Policy lists what is used and how to choose.

We share information with the categories of service providers that operate the Services on our behalf:

• payment and billing providers, which process purchases, subscriptions, refunds and payment disputes;
• hosting and infrastructure providers, which run the website, the licensing service and its database;
• analytics providers, which measure how the website is used, as described in the Cookie Policy;
• email delivery providers, which send license and support messages.

These providers are bound by contract or by law to use the information only as needed to provide their service. We may change providers within these categories; the categories themselves are what this Policy describes.

We may also disclose information when required by law, to protect rights or safety, or in connection with a corporate transaction, subject to applicable law.

We do not sell personal information and do not use it for cross-context behavioral advertising.

Your information may be processed in Brazil, the United States, and other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers.

We keep information only as long as reasonably necessary for the purposes described above. Purchase and license records are kept for as long as the license is valid and afterwards for the period required by accounting and tax obligations, and for the resolution of disputes. Other information is kept according to its purpose and context. We may retain de-identified or aggregated information where permitted by law.

We use reasonable technical and organizational measures designed to protect personal information. No system or transmission is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, you may request access to, confirmation of, correction of, deletion of, anonymization or blocking of unnecessary or excessive information, portability, information about sharing, withdrawal of consent, and review of certain automated decisions. You may also object to processing in circumstances permitted by law.

To make a request, email privacy@getnotchnook.com. We may need to verify your identity and may retain limited information where required or permitted by law, including records we must keep for tax purposes.

For individuals in Brazil, these rights are addressed under the Lei Geral de Proteção de Dados (LGPD). You may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD). Rights under other applicable laws, including the GDPR or U.S. state privacy laws, are preserved where they apply.

The Services are not directed to children. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us at the address below.

We may update this Policy from time to time. We will post the updated version here and revise the effective date. Material changes will be communicated by an appropriate method when required by law.

• Controller: lo.cafe Ltda.
• CNPJ: 35.124.367/0001-00
• Publisher of NotchNook
• Country: Brazil
• Email: privacy@getnotchnook.com