pronoto
Privacy Policy
Last updated: April 2026
This Privacy Policy applies to the Pronoto web app and the Pronoto Chrome extension, operated by Notolabs Technologies OÜ (registry code 16989009, Tartu mnt 67/1-13b, 10115 Tallinn, Estonia), trading as NotoLabs.ai.
By using our services you agree to the practices described here. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, Notolabs Technologies OÜ acts as the data controller.
For users in California, this policy also describes your rights under the California Consumer Privacy Act (CCPA).
Pronoto was previously operated at pronoto.io; all such links now redirect to pronoto.ai, and this policy applies equally to both.
Information We Collect
- Account information (name, email address) when you sign up
- Notes, teleprompter scripts, voice recordings, and other content you create and store
- Usage data and preferences to improve your experience
- Device and browser information for troubleshooting and security
- Analytics data such as feature usage and session activity — collected via Google Analytics and PostHog to understand how features are used and improve the product. No personally identifiable information is shared with these tools beyond anonymised usage data.
- Chrome extension — web page URLs you choose to clip from and the content you explicitly save or clip
- Chrome extension — sticky note content you create on web pages and the URLs those notes are associated with
- Chrome extension — extension-specific settings and preferences stored locally in your browser
How We Use Your Information
- Provide, maintain, and improve our services
- Sync your data securely across all your devices
- Process AI queries to help you with your notes
- Send important technical notices, billing updates, and support messages
- Comply with legal obligations and enforce our terms
Legal Basis for Processing (GDPR)
- Contract performance — processing necessary to provide the service you signed up for
- Legitimate interests — analytics and security to improve and protect the service
- Legal obligation — disclosures required by applicable law
- Consent — where we rely on consent (e.g. marketing), you may withdraw it at any time
Data Storage & Security
- Your data is stored securely using Firebase services by Google
- All data is encrypted in transit using TLS/SSL
- Notes and scripts are encrypted at rest
- We implement industry-standard security measures and access controls
- Data may be stored on servers located in the United States or other regions where Google operates
Data Retention
- We retain your data for as long as your account remains active
- If you delete your account, your data is deleted immediately and permanently — notes, scripts, uploaded files, and your Auth account
- Anonymised analytics data may be retained longer for aggregate reporting
- You can delete your account yourself at any time from Settings → Data → Delete account
AI Processing
- When you use AI features, your queries and any note content you explicitly share are sent to our AI provider(s) for processing
- Note content is only sent to AI providers when you actively use an AI feature — it is never transmitted passively in the background
- We do not share your personal information with AI providers beyond what is required to fulfil your specific request
- Our AI providers do not use your data to train their models — your content is not used to improve AI systems
- We may use different or multiple AI providers over time to improve the service; this policy will be updated accordingly
- Your content is not stored or retained by AI providers beyond the duration of processing your request
Chrome Extension — Data Practices
- The extension requests access to the pages you visit (host permissions) solely so its floating teleprompter, sticky notes, and page-summary tools are available on any site you choose to use them on — it does not read, log, or transmit page content unless you actively trigger one of these features
- Permissions used and why: storage (save your preferences locally on your device), tabs (identify the active page when you clip or save a note), scripting (display the floating overlay/tools you invoke), contextMenus (right-click shortcuts), identity (Google sign-in)
- When you use the AI webpage summary feature, the visible text of that specific page is sent for AI processing to generate your summary — this only happens when you explicitly request it, never passively
- We do not use or transfer extension user data for purposes that are unrelated to the extension's single purpose of providing teleprompter, notes, and AI copilot tools
- We do not use or transfer extension user data to determine creditworthiness or for lending purposes
- To delete your account and all associated data (including extension data), use the web app at pronoto.ai (Settings → Data → Delete account), or email hello@pronoto.ai if you're unable to access the web app
International Data Transfers
- Pronoto is operated by Notolabs Technologies OÜ (Estonia) and serves users globally
- Your data may be transferred to and processed in countries outside your own
- Where required, we rely on appropriate safeguards such as Standard Contractual Clauses
- Google Firebase (our infrastructure provider) operates data centres globally — see Google's privacy policy for details
Data Sharing
- We never sell your personal information to third parties
- Data is shared only with service providers necessary to operate Pronoto (e.g. Google Firebase for storage/auth, Stripe for payment processing)
- Stripe receives your name, email, and payment details to process subscriptions — they are a certified PCI-compliant payment processor. Pronoto never stores your card details
- We may disclose data to comply with legal obligations or valid government requests
- All third-party processors are contractually bound to protect your data
Your Rights
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — request deletion of your account and all associated data
- Portability — export your notes and scripts in standard formats
- Restriction — ask us to limit how we process your data in certain circumstances
- Objection — object to processing based on legitimate interests
- Withdraw consent — opt out of marketing communications at any time
- California residents (CCPA) — right to know, delete, and opt out of sale (we do not sell data)
Cookies & Analytics
We use cookies and similar technologies to keep you logged in and to collect aggregate analytics data (via Google Analytics) to understand how people use Pronoto. Analytics data is anonymised and not linked to your account. You can disable analytics cookies through your browser settings.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you via email or an in-app notice. Your continued use of Pronoto after any change constitutes acceptance of the updated policy.