Privacy Policy

Last updated: March 20, 2026

Overview

NoteWeave (“we,” “our,” or “us”) is a personal knowledge management tool that helps you save, reflect on, and organize content from the web. This policy explains what data the NoteWeave web application and Chrome extension collect, how it is used, and your rights.

What We Collect

  • Account information — When you sign in with GitHub or Google, we receive your name, email address, and profile picture from your OAuth provider. We use this to create and maintain your account.
  • Content you save — URLs you submit, extracted article text, your reflection conversations, and the wiki articles generated from them. This is the core data you create within NoteWeave.
  • Authentication tokens — The Chrome extension reads your NoteWeave authentication cookie to verify you are signed in before making API calls. No other cookies are read or modified.
  • Page metadata — When using the extension, we read the current tab’s URL, title, and Open Graph metadata to display page information and send it to the NoteWeave API.

What We Do Not Collect

  • We do not track your browsing history or monitor your activity across websites.
  • We do not collect health, financial, or location data.
  • We do not use analytics trackers in the Chrome extension.
  • We do not read or modify any cookies other than the NoteWeave authentication cookie.

How We Use Your Data

  • To provide the service — Your saved content, conversations, and wiki articles are stored so you can access, search, and build upon your personal knowledge base.
  • To generate reflections — Article content and your conversation messages are sent to a third-party language model provider (OpenRouter) to power the AI reflection feature. We do not send your account information to these providers.
  • To authenticate you — Your auth token is used to verify your identity when making API calls from the extension or web app.

Third-Party Services

  • Convex — Database and backend hosting.
  • Vercel — Web application hosting and analytics.
  • OpenRouter — Routes AI requests to language model providers for reflection conversations and wiki generation.
  • GitHub / Google — OAuth sign-in providers.

We do not sell or transfer your data to third parties for advertising, marketing, or any purpose unrelated to providing NoteWeave.

Chrome Extension Permissions

The NoteWeave Chrome extension requests the following permissions, each used solely to provide its core functionality:

  • cookies — Reads your NoteWeave auth cookie to keep you signed in.
  • activeTab — Accesses the current tab’s URL and title for display and saving.
  • scripting — Reads Open Graph metadata from the current page for better titles.
  • contextMenus — Adds a “Save to NoteWeave” right-click option.
  • sidePanel — Provides the side panel UI for reflections.
  • tabs — Detects tab switches to update context and preserve conversations.
  • storage — Saves in-progress conversations across tab switches within your session.
  • Host permission (noteweave.xyz) — All API calls are made to the NoteWeave backend.

Data Retention and Deletion

Your content is stored as long as your account exists. You can delete individual articles, sources, and conversations at any time from the dashboard. If you wish to delete your entire account and all associated data, contact us at the email below.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of NoteWeave after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this privacy policy or your data, reach out at privacy@noteweave.xyz.