Security and privacy
What we collect today, and what’s next
How the Notaray site handles data today, and the security practices lined up for the product. Notaray is not live and holds no customer data yet. The privacy policy has the full detail and how to reach us.
What this site collects
The site sets no cookies and shows no advertising. It uses cookieless, aggregate analytics from Vercel to count page views and measure speed. It does not follow you across sites.
If you fill in a form, we store what you enter, the language and domain you used, the page you were on, the wording you agreed to and the time. We store the country derived from your connection, not a profile of you.
Forms use rate limits and bot checks to stop abuse. Confirmation emails are sent through an email provider acting on our behalf.
Where it’s stored
Sign-up and application data is stored in the United States, in a Supabase database hosted in the us-east-1 region. Canadian visitors should know their data is stored outside Canada.
A sign-up you do not confirm by email is deleted after 30 days, and no marketing email is sent to it. You can ask us to delete or correct your data at any time.
Product security, before the pilot
Notaray holds no customer data today, so there is nothing to protect yet beyond the forms above. Before any pilot, we will publish where data is stored, who can access it, how long recordings and transcripts are kept and how consent is captured.
Each business’s data will be kept separate from every other business’s data, and every booking action recorded in a receipt that later changes cannot overwrite.
Found a vulnerability?
If you find a security problem on this site, please tell us. The details are in our security.txt file.
More detail
Questions about your data?
The privacy policy names the person responsible for personal information.