Legal
Subprocessors
The providers used to host, secure, and operate NotePetal.
Provider roles
These providers process information to host, secure, and operate NotePetal. Which providers receive your data depends on the features you use. Some, including Polar, may act as independent controllers for parts of their services rather than solely as processors on our behalf.
Services used by NotePetal
| Provider | Service and information processed |
|---|---|
| Hetzner | Application hosting and background processing: web requests, uploaded material, rendering and export tasks, and operational diagnostics. |
| Supabase | Authentication, database, and private file storage: account and session data, notebooks, sources, figures, fonts, exports, and usage and plan records. |
| Cloudflare | DNS and proxied website delivery, enabled Turnstile security checks, and support email routing: traffic, browser and network signals, and routed support messages. |
| Brevo | Transactional and support email delivery: recipient addresses, authentication emails, support replies, and delivery metadata. |
| Optional Google sign-in and the support inbox: chosen account identity details, incoming support messages, attachments, and reply history. | |
| OpenRouter | AI routing: approved source text, notebook context, instructions, generated responses, and request metadata for user-requested generation. |
| DeepInfra | AI inference through OpenRouter. The provider may change as the service develops. Processes text and instructions for the requested action under the enforced routing policy. |
| Mistral | Opt-in hosted OCR: submitted images or PDF files, requested page selection, recognized text, and request metadata. |
| Polar | Merchant of record: checkout, payment information, taxes, invoices, subscription status, refunds, and the customer billing portal. NotePetal receives references and entitlement information. |
AI routing and international processing
OpenRouter generation requests require a zero data retention route and disable automatic provider fallback. Mistral OCR has separate processing terms. Providers may process information outside your country; the Privacy Policy and AI & Upload Policy explain the related data handling. Contact us for the current deployed model provider and transfer safeguards.
Changes to the provider list
We update this list when service providers or their roles change. Where a change materially affects existing account data, we will provide appropriate notice or request consent where required before the new processing starts.
Contact
Questions, privacy requests, billing concerns, and reports can be sent to [email protected], or by post to:
Alexandru Grecu, operating as NotePetalStreet Tineretului nr. 17, bl. 6, entrance A
Chiajna 077041
Romania