Privacy policy

What this policy covers

This policy applies to messynote.com, the MessyNote Reading Room app at messynote-study.brandong453.chatgpt.site, support, and related email. It also preserves coverage for earlier digital products, free automation-fit requests, Current-State Maps, and automation builds. Legacy automation services serve businesses.

This policy also applies when you request a free automation-fit review through a Messy Note Facebook lead form.

For digital playbook purchases, we store the purchaser email received from Stripe, payment references and status, the purchased product/version, download-access records, and campaign tags supplied in the product-page link. We use these to deliver purchases, provide support, prevent abuse, and understand which ads lead to purchases. Buying a playbook does not automatically enroll you in marketing email.

Optional public website analytics

HeyCatch helps us understand visits and clicks on the public MessyNote website when you choose “Allow site analytics.” This is a separate choice from Meta and OpenAI advertising measurement. Declining does not affect trials or membership. Use “Site analytics settings” to withdraw permission; we also honor Global Privacy Control and Do Not Track.

Allowed analytics include an anonymous browser identifier, public page addresses, permitted campaign tags, click activity and basic browser/device information. We mask page text and element attributes, strip private query strings and fragments, and exclude private, checkout and administration routes. The Reading Room app is on a separate host and is not included in this installation. We do not send account names, email, notes, conversations, voice, support messages or payment details to HeyCatch. Analytics identifiers may be stored in your browser after you allow measurement; your analytics choice is also remembered there. Withdrawal stops future capture but cannot recall information already sent.

Your Reading Room account

The Reading Room stores your account identifier, verified email and name, conversations, finished notes, folder choices, usage amounts, and subscription status so you can return to your library on another device. Your library is tied to your account; other customers cannot browse it.

Supabase handles sign-in. If you choose Google sign-in, Google shares your account identifier, email, and basic profile information with Supabase for authentication. This sign-in does not grant MessyNote access to your Gmail, Drive, or Calendar. The app and its note database run on Cloudflare through Sites.

When you request AI help, relevant conversation or note content is sent to OpenAI to provide that feature. This is server processing, not end-to-end encryption. Provider processing and retention rules also apply. Stripe handles subscriptions; MessyNote does not receive or store your full card number.

We record account identifiers, request times, technical errors, and usage amounts to operate the service and enforce allowances. Technical logs are designed to exclude your note and conversation text. A temporary recovery copy of unsaved work may remain in your browser so you can retry saving or download it.

Reading Room voice beta

When you choose “Talk it through” and allow microphone access, your audio is sent to OpenAI to understand your speech and respond aloud. Relevant conversation text is also included so you can continue a thought. MessyNote saves the conversation transcript in your account; it does not save an audio recording. Provider processing and retention rules also apply.

Use Mute to pause microphone input or End conversation to disconnect. A temporary transcript recovery copy may remain in your browser if saving fails. Speech transcripts can contain mistakes, and an interrupted reply may include words that did not finish playing. Dictation is a separate option that uses the speech-recognition service supplied by your browser.

Your Reading Room choices and retention

You can download your library from Account and support history from Support. Ending a subscription does not delete your saved notes; they remain available to read, edit, and download. Account deletion removes notes, conversations, support history, and your waitlist entry from active app storage and requests deletion of your sign-in account. Backups may retain copies for the provider’s backup retention period. Necessary payment records are kept separately. A limited trial-eligibility record also remains after deletion to prevent repeat trials: account and subscription identifiers, trial dates, and billing environment. It does not include notes or conversation content.

For access, correction, deletion, or support, email hello@messynote.com from your account email. Do not include passwords, card details, or private note contents unless needed to explain the issue.

Reading Room support and the waitlist

When you submit a support ticket, we store the information you choose to share, your account identifier, and our replies. The support team can read tickets to help you and may use OpenAI to help review them and draft responses. Your notes, conversations, and audio are not automatically attached. Replies appear in your support thread.

If you choose to join the waitlist, we save your account identifier and consent alongside the verified email already on your account. This records your interest in a future opening and does not start a membership. You can leave the waitlist on its page.

Optional ChatGPT advertising measurement

OpenAI advertising measurement is a separate choice from Meta measurement. If you allow it, we retain the OpenAI ad-click reference supplied with your visit and carry it to the Reading Room through a browser fragment. The app asks you to confirm an imported Allow before sign-in continues, then saves your choice to your account. We do not load the OpenAI advertising pixel or send a browser purchase event.

For a confirmed first paid $12 founding membership with an available, consented OpenAI click reference, our server may send OpenAI the payment amount and currency, payment time, an opaque event identifier, the public account-page address and that click reference. We do not send notes, conversations, voice, support messages, email, IP address, payment-card information, or private checkout links. Sign-ins, checkout starts, failed payments and renewals are excluded. No reference means no OpenAI purchase report in this integration.

Membership works either way. Use “ChatGPT ad privacy” to change this separate choice. Browser choices and allowed account attribution expire after 30 days. Global Privacy Control and Do Not Track keep measurement off. Withdrawal clears retained click references and cancels unsent events; it cannot recall an event already sent. A later Allow does not authorize an earlier payment. A choice changed on the public website applies there until you follow “Save this choice to your account” and sign in, or update it inside the app. Necessary billing and limited event-deduplication records remain separately. OpenAI handles received information under its privacy policy.

Optional Reading Room advertising measurement with Meta

When this option is available, you can allow or decline measurement of the first successful paid Reading Room membership. Choosing Allow lets MessyNote send Meta the payment amount and currency, event time, an opaque event identifier, the public membership-page address, advertising browser/click identifiers, and browser/device information such as browser type. We use this to measure advertising and help Meta optimize delivery. This membership integration does not send Meta your IP address, email, card details, notes, conversation text, voice, support messages, or private account and checkout links. It uses a server connection and does not load Meta’s tracking script into the Reading Room.

Membership and checkout work whether you allow or decline. Sign-ins, checkout visits, free trials and later renewals are not counted as a first paid membership. A new opt-in does not authorize sharing an earlier payment.

The website remembers your browser choice with a 30-day expiry and removes expired copies on your next visit. Only allowed campaign and click references are carried to the app. An imported Allow choice must be confirmed in the app before it can authorize sharing; an imported Decline keeps measurement off. The app saves your choice to your account after sign-in. Allowed account attribution expires after 90 days, after which it cannot be used to share a purchase.

Use “Ad privacy settings” to change your choice. Declining on this website clears its advertising identifiers; choose “Save this choice to your account” and sign in to also withdraw account sharing, or change the choice directly inside the app. The app honors Global Privacy Control and Do Not Track signals and cancels unsent measurement events when you withdraw. Withdrawal cannot recall information already sent to Meta. Necessary payment and event-deduplication records may remain separately from advertising identifiers.

Meta processes received information under its own privacy policy. Contact hello@messynote.com for help with access or deletion.

Earlier products and automation services: information we collect

• Contact and business details you submit, including your name, business name, business email, website, and business type.
• The workflow information you choose to describe, such as the recurring chore, frequency, and tools involved.
• Messages, review decisions, approved scopes, delivery records, and support communications.
• Payment status, transaction references, and basic billing metadata from Stripe. Messy Note does not receive or store your full card number.
• Basic technical and security information needed to operate and protect the site.

When you submit a Facebook lead form, we receive the contact and business information and workflow answers you choose to provide, plus associated lead, form, ad, and campaign identifiers and submission times where available. We use these references to identify your request, avoid duplicate follow-up, and understand which advertising led to inquiries and purchases. We may link your request to a website case and its payment status if you later choose to purchase a plan or build.

Do not submit passwords, access tokens, payment-card details, customer records, patient information, government identifiers, privileged legal material, or other sensitive information during fit review.

Earlier products and automation services: how we use information

We use information to review fit, communicate with you, prepare and deliver purchased work, create approved payment links, provide support, keep an activity record, prevent abuse, and improve the service. AI may help organize or analyze the information, but a person makes fit, scope, price, and send decisions.

Earlier products and automation services: service providers

Facebook lead forms are provided by Meta. Information submitted through those forms is processed by Meta under its own terms and privacy policy and made available to Messy Note for the review you request. A person makes fit, scope, price, and send decisions. Submitting a review request does not enroll you in ongoing marketing.

Messy Note uses service providers to operate the business, including Cloudflare for site infrastructure, Google for email, n8n for workflow automation, OpenAI for assisted analysis and drafting, and Stripe for payments. Anymail Finder may be used separately to verify business contact information for prospecting; it is not used to process payment-card data.

We disclose information only as needed for those services, to comply with law, protect the service, or complete a transaction you requested. We do not sell personal information.

Earlier purchase records and security

We keep case, delivery, payment, and support records only as long as reasonably needed for the service, accounting, dispute handling, security, or legal obligations. We use access controls and other practical safeguards, but no internet service can promise absolute security.

Optional advertising measurement

On our HVAC playbook pages, you may allow or decline advertising measurement. If you allow it, Messy Note sends Meta the public product-page address, visit or verified-purchase event, event time, an event identifier, purchase value and currency where applicable, browser information, IP address and advertising browser/click identifiers. We do not include names, email addresses, card details, private checkout or download links, or your workflow answers in these events.

We use this information to measure advertising and help Meta optimize delivery. Our integration uses a server connection; it does not load Meta’s tracking script into your purchase confirmation page. Your choice and any allowed advertising identifiers are stored in your browser, expire after 30 days, and are cleared on your next playbook visit after expiry. Declining does not affect purchases or downloads. Change your choice using “Ad privacy settings” on the playbook pages. We honor browser Global Privacy Control and Do Not Track signals for this measurement. Withdrawing permission stops future sharing, but does not erase information already sent to Meta.

Meta processes information under its own privacy policy. For access or deletion requests, contact hello@messynote.com.

Your choices

You may ask what information we hold about you, request a correction or deletion, or opt out of marketing email by writing hello@messynote.com. Some billing, fraud-prevention, or legal records may need to be retained.

Changes and contact

We may update this policy as the service changes. The date above identifies the current version. Questions or requests can be sent to hello@messynote.com.