Privacy Policy

Last Updated: October 19, 2026

This policy explains how NOTABIS Labs handles information when you use the NOTABIS account platform, NOTABIS SEO, WebCheck, browser tools, templates, product websites and related services.

1. Information we collect

Account information: We collect your email address, display name and password when you create an account. Passwords are stored using one-way hashing rather than in readable form. You may also provide optional profile information.
Product and usage information: We process information needed to provide the products you use, such as audit submissions and results, monitored targets and check history, service settings, usage allowances, support requests and account preferences.
Purchase information: We keep records of orders, prepaid credits, digital products, transaction status and related account activity. Payment card and bank details are handled by the relevant payment provider rather than stored in full by NOTABIS.
Technical information: We may collect IP address, browser and device information, request metadata, security events and server logs to operate the services, prevent abuse and investigate faults.
Signup and referral information: When you visit a registration page, we may collect information about how you arrived there, such as the referring website or product, the page you landed on, and campaign details included in a link (for example, source, medium, campaign, term or content). When a signup is referred through another NOTABIS product, we may record both the original referral source and the product that directed you to your account. We may link this information to your account when a new account is created. Referrer and landing-page URLs are stored without their query strings or fragments; campaign values are stored separately. This information may be incomplete or inaccurate if it was not provided by the referring link or product.
Information from communications: If you contact support, we collect the information you choose to include so we can respond and keep an appropriate service record.

2. How we use information

To create and secure your account and provide the products and features you request.
To run audits, monitoring checks, browser utilities and other product functions based on your instructions.
To process payments, credits, orders and fulfilment.
To provide support, communicate service information and improve reliability and usability.
To understand which campaigns, websites and products lead to account registrations, and to improve our products and signup experience.
To detect, prevent and respond to fraud, abuse, unauthorised access and security incidents.
To comply with legal obligations and establish, exercise or defend legal claims.

Depending on the activity, we process information to provide a service you request or perform a contract, meet legal obligations, pursue legitimate interests in operating and protecting our services, or obtain consent where applicable law requires it. Optional advertising or analytics choices do not control necessary account, security or service functions.

3. Product-specific processing

When you use NOTABIS SEO, we process the websites and pages you ask us to audit and the resulting technical measurements and recommendations. When you use WebCheck, we process the targets and check configuration you provide, together with availability, DNS, TLS, content and incident evidence needed to operate monitoring. You must only submit targets and content that you own or are authorised to use.

Browser tools are intended to process suitable inputs directly in your browser where the individual tool permits it. Templates and marketplace products may be provided through third-party platforms such as Notion and are also subject to those platforms’ policies.

4. Sharing information

We do not sell or rent personal information. We may share information with:

Service providers that host, secure, operate or support NOTABIS.
Payment providers such as Stripe or PayPal when processing a payment.
Third parties you choose to connect or use, such as an external product or marketplace.
Authorities, advisers or other parties where required by law or necessary to protect rights, safety and service security.

5. Cookies and security

We use necessary cookies for authentication, sessions, security and preferences. We may use limited operational information to understand errors and service performance. You can control cookies through your browser, but disabling necessary cookies may prevent account features from working.

Some product websites may use the shared NOTABIS consent manager for optional technologies. When enabled on a site, it stores that site’s purpose choices in the visitor’s browser, with an expiry set for that site; preferences are not synchronised between independent domains and NOTABIS does not keep a visitor-level consent database. Visitors can reopen the site’s privacy choices and change or withdraw an optional choice. Where an external advertising provider requires an existing TCF-compatible consent signal, the network waits for that provider’s real signal; the NOTABIS preference tool does not create TCF strings or claim certification. Each product’s own privacy notice describes the providers and processing used there.

NOTABIS.com pages that display advertising may show contextual campaigns from NOTABIS Ads even when you reject optional advertising. An external provider such as ExoClick is requested only after you allow third-party advertising in Privacy choices. The provider may process request, device, impression and interaction information under its own privacy terms. You can change or withdraw your choice from the Privacy choices link in the site footer.

We use reasonable technical and organisational safeguards, including encrypted transport, access controls, password hashing and security monitoring. No internet service can guarantee absolute security.

6. Retention and your rights

We retain information for as long as needed to provide the services, maintain appropriate business and security records, resolve disputes and meet legal obligations. Depending on your location, you may have rights to access, correct, delete or restrict processing of your personal information, or to object to or withdraw consent where applicable. Some records may need to be retained for legal, fraud-prevention or accounting reasons.

Signup and referral information is kept with the associated account. Deleting an account removes its linked signup-attribution record from the active account database. Backup copies may retain the record after that deletion; account deletion does not directly remove data from those copies.

To ask about your information or request account assistance, contact us using the address below. We may need to verify your identity before completing a request.

7. Children and international use

The services are not intended for children who are not permitted to use online services under the laws applying to them. If you believe a child has provided personal information, contact us so we can investigate. Service providers may process information in countries other than your own, subject to applicable safeguards.

8. Changes and contact

We may update this policy when our services or legal obligations change. The latest version will be posted on this page. Privacy questions and rights requests can be sent to [email protected].