Privacy Policy
This Privacy Policy explains how Hellovelop Inc. ("Hellovelop", "we", "us") collects, uses, shares and protects personal data when you use LimeNote at limenote.org (the "Service"). We are the controller of the personal data described here.
- Controller: Hellovelop Inc., 344, Wonjeok-ro, Bupyeong-gu, Incheon, Republic of Korea
- Privacy contact: [email protected]
1. Information we collect
Account information
When you sign in with Google we receive your name, email address, Google account identifier and profile picture. We use the email address to identify your account and to send service messages.
Your content
Audio you record or upload, the transcripts produced from it, the notes and summaries generated from those transcripts, and the titles, tags and glossary terms you add. Audio may contain the voices and personal data of other meeting participants; you are responsible for having the right to record and upload it (see our Terms of Service).
Payment information
Payments are processed by Paddle.com, our reseller and Merchant of Record. Paddle collects your payment card or other payment details directly; we never receive or store your full card number. We receive the plan you purchased, the transaction status and identifiers, the amount and currency, and the billing country needed for tax purposes.
Technical and usage data
When you use the Service our servers record technical data such as your IP address, browser type, device information, the pages and API endpoints you request, timestamps and error logs. We use this to keep the Service secure and reliable. We also record your usage in credits, which determines what you are charged.
Preferences
Your interface language and similar settings.
Analytics and behavioural data
If you allow analytics cookies, Google Analytics 4 and Microsoft Clarity may collect cookie and online identifiers, pages viewed, visit times, clicks, scrolling and mouse movement, browser and device information, and an IP address used for approximate location or masked by the provider. We use this data only for aggregate usage statistics, traffic-source analysis, session replay and improvements to the Service's UI and UX.
2. How we use information
- To provide the Service: store your recordings, transcribe them, generate notes, and show them to you and to the people you share them with.
- To manage your account and subscription, meter credits, and process payments through Paddle.
- To send service emails such as sign-in verification, receipts and important notices about your account or these policies.
- To respond to your support requests.
- To secure the Service, prevent abuse and fraud, and debug problems.
- With your consent, to analyse aggregate usage and usability through Google Analytics 4 and Microsoft Clarity and improve the Service.
- To comply with legal obligations, such as tax and accounting rules.
We do not sell personal data, use Your Content for advertising, or use advertising cookies. Google Analytics 4 and Microsoft Clarity run only after you allow analytics cookies.
Where a legal basis is required, we rely on: performance of our contract with you (providing the Service), our legitimate interests (security and improving the Service), your consent (where required), and compliance with legal obligations.
3. Third parties that process your data
We rely on the following service providers, who process data on our behalf and under terms that restrict them to the purposes below. Providing the Service requires sending your data to them.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Paddle.com Market Ltd / Paddle.com Inc. | Payments, invoicing, tax and refunds (Merchant of Record) | Name, email, billing details, purchase history | United Kingdom, United States |
| DeepInfra | Speech-to-text transcription (Whisper models) | Audio recordings | United States |
| Google (Gemini API), Anthropic, xAI | AI language models that generate notes and summaries | Transcript text | United States |
| Cloudflare | File storage (R2), content delivery, DNS and security for limenote.org | Audio files, request metadata such as IP address | Global network (United States and other regions) |
| Resend | Transactional email delivery | Email address, email content | United States |
| Google (Sign in with Google) | Authentication | Google account identifier, name, email | United States |
| Google LLC (Google Analytics 4) | Usage statistics, traffic-source analysis and service improvement | Cookie and online identifiers, device/browser data, visits and page interactions | United States |
| Microsoft Corporation (Microsoft Clarity) | Heatmaps, session replay, usability analysis and UI/UX improvement | Cookie identifier, masked IP address, device/browser data, clicks, scrolling and mouse movement | United States |
We may also share personal data when required by law or legal process, to protect the rights and safety of users or the public, or as part of a merger or acquisition, in which case this policy will continue to apply.
4. International transfers
We are based in the Republic of Korea. The providers listed above may store and process data outside Korea. We rely on their contractual commitments and safeguards and transfer only the data needed for each purpose. Analytics data is transferred only after you consent.
| Recipient / country | Data and purpose | Timing and method | Retention |
|---|---|---|---|
| Google LLC / United States | Cookie and online identifiers, device/browser data and website interactions for usage statistics, traffic-source analysis and service improvement | Automatically over the network while using the Service after analytics consent | Up to 14 months from collection |
| Microsoft Corporation / United States | Cookie identifier, masked IP address, device/browser data, clicks, scrolling and mouse movement for heatmaps, session replay and UI/UX improvement | Automatically over the network while using the Service after analytics consent | 30 days from collection |
5. Retention and deletion
- Recordings, transcripts and notes are kept for as long as you keep them in your account. You can delete an individual recording at any time, which also removes its audio file from storage.
- Deleting your account from Settings permanently deletes your recordings and their audio files, transcripts, notes, glossary and other account data.
- Billing and transaction records are kept for as long as tax and accounting laws require. Paddle keeps its own records as Merchant of Record.
- Server logs containing IP addresses are kept for a limited time for security and troubleshooting, then deleted or anonymised.
- Google Analytics 4 analytics data is kept for up to 14 months from collection.
- Microsoft Clarity session recordings and behavioural data are kept for 30 days.
6. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, restrict or object to certain processing, and withdraw consent where processing is based on consent. You can view and delete your recordings, and delete your account, directly in the Service. For anything else, email [email protected] from the address linked to your account. We respond within the time required by applicable law, and normally within 30 days. You also have the right to lodge a complaint with a data protection authority; in Korea that is the Personal Information Protection Commission (PIPC).
7. Cookies, analytics consent and local storage
We use the following cookies and browser storage:
- A secure, HTTP-only session cookie that keeps you signed in.
- Browser storage for your language preference and versioned analytics consent choice.
- Our infrastructure provider (Cloudflare) may set strictly necessary cookies for security and bot protection.
- With your consent, Google Analytics 4 and Microsoft Clarity use cookies or similar technology for the analytics purposes described above. Advertising storage remains disabled.
You can allow, decline or later withdraw analytics consent using the control below. You can also block cookies in your browser or install the Google Analytics opt-out browser add-on. Declining or withdrawing analytics consent does not affect core Service features, but it limits our usage and usability statistics.
Browser controls include Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data; Chrome: Settings → Privacy and security → Third-party cookies.
8. Security
Data is encrypted in transit (HTTPS/TLS). Access to production systems is restricted to authorised personnel. Payment details are handled by Paddle, a PCI DSS compliant provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your data we will notify you and the relevant authorities as required by law.
9. Children
The Service is not directed to children under 14, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy. We will post changes on this page and update the "Last updated" date, and notify you by email or in the Service for material changes.
11. Contact
Privacy questions and requests: [email protected]. Postal address: Hellovelop Inc., 344, Wonjeok-ro, Bupyeong-gu, Incheon, Republic of Korea.