Privacy Policy

1. Information we collect

Account and identity information

We collect information you provide when creating or managing an account, such as your name, email address, username, notification addresses, and account preferences. Authentication is provided through Amazon Web Services, including Amazon Cognito. Cognito processes passwords and verification credentials on our behalf.

Google sign-in information

If you choose Continue with Google, Google makes basic identity information available under the openid, email, and profile permissions. This may include your Google account identifier, name, email address, email verification status, and basic profile information presented on Google's consent screen. Google may make a profile photo available as part of the profile permission, but Notyfi does not currently store or display that photo.

Notyfi does not request access to your Gmail, Google Drive, Google Calendar, contacts, files, or other Google content.

Tracking content and preferences

We collect the requests you ask Notyfi to track, any scope answers or notes you add, source selections, folders, delivery cadence, notification settings, generated feed information, and your interactions with feeds and events. Your requests may contain personal information if you choose to include it.

Billing information

Stripe hosts our checkout and billing portal. We receive billing-related information such as your Stripe customer identifier, subscription plan and status, transaction status, and billing dates. We do not receive or store your complete payment card number.

API, MCP, and integration information

When you use our API, MCP service, or an agent integration, we process API key metadata, requests, responses, feed identifiers, timestamps, and related usage and security information.

Device, network, and usage information

Our hosting, security, and application providers may automatically process IP address, browser and device type, operating system, referring page, requested URLs, timestamps, approximate location derived from IP address, and diagnostic, security, and error logs. Our site also loads resources from providers such as Google Fonts and jsDelivr, which receive ordinary web request information.

Browser storage

We use browser local storage and session storage to keep you signed in, protect the Google OAuth flow, carry a tracking request into the dashboard, and retain a newly generated API key on your device. Google, Cognito, Stripe, and other hosted services may use cookies or similar technologies on their own domains under their respective policies. You can clear Notyfi browser storage through your browser, but doing so may sign you out or remove locally retained information.

2. Where information comes from

We collect information directly from you, from the devices and integrations you use, from Google when you choose Google sign-in, from Stripe in connection with billing, and from service activity. To build feeds, we also collect information from public websites, databases, feeds, APIs, filings, and other sources relevant to a tracking request.

3. How we use information

• Provide, operate, maintain, and improve Notyfi.
• Authenticate you and create, secure, or link your account.
• Interpret tracking requests, discover and monitor sources, evaluate relevance, build feeds, and deliver notifications.
• Process subscriptions, provide billing support, and enforce plan limits.
• Enable API, MCP, and agent integrations.
• Prevent abuse, investigate incidents, debug errors, and protect users and the service.
• Communicate about account activity, security, service updates, support, and transactions.
• Comply with law and enforce our Terms.

4. How we use Google user data

We disclose Google user data only to service providers that help us provide and secure authentication, when you direct us to, or when required by law. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements where applicable.

5. How we disclose information

We may disclose information in the following circumstances:

• Infrastructure and security. Amazon Web Services hosts authentication, application, database, queue, logging, and related infrastructure. Cloudflare provides site delivery, DNS, and security services.
• Authentication. Google and Amazon Cognito process information needed for Google sign-in and account authentication.
• Payments. Stripe processes checkout, payments, subscriptions, invoices, and the customer billing portal.
• Email. Resend processes recipient addresses and message contents to deliver verification, account, security, and tracking emails.
• Search and feed processing. AI model, search, data, and source providers may process tracking content or query-derived terms as needed to interpret requests, discover sources, evaluate relevance, and operate feeds.
• Your direction. We disclose information when you ask us to connect an integration, deliver information to a recipient, or otherwise direct the disclosure.
• Legal and safety. We may disclose information to comply with law, protect rights and safety, investigate fraud or abuse, or respond to valid legal process.
• Business transactions. Information may be disclosed in connection with financing, due diligence, a merger, acquisition, reorganization, or sale of assets, subject to appropriate protections.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use personal information to serve targeted advertisements.

6. Retention

We retain account information and tracking content while your account is active and for as long as reasonably necessary to provide the service. We may retain billing, security, fraud-prevention, backup, and legal records for longer when needed to comply with law, resolve disputes, enforce agreements, or protect the service. When information is no longer needed, we delete or deidentify it according to our ordinary retention and backup processes.

7. Your choices and rights

You can change delivery preferences in Notyfi, cancel a paid subscription through the billing portal, disconnect Notyfi through your Google Account, and clear local browser storage. Disconnecting Google does not by itself delete your Notyfi account.

You may ask to access, correct, or delete personal information by emailing [email protected]. Depending on where you live, you may also have rights to receive a portable copy, object to or restrict processing, appeal a decision, or use an authorized agent. We may verify your identity before completing a request. We will not discriminate against you for exercising applicable privacy rights.

8. Security

We use technical and organizational safeguards designed to protect information, including encryption in transit, access controls, isolated secrets, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your password and API keys confidential and notify us if you believe your account has been compromised.

9. Age requirement

Notyfi is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided information to us, contact us so we can review and delete it as appropriate.

10. International processing

We and our providers may process information in the United States and other countries. Those countries may have data protection laws different from the laws where you live. Where required, we use legally recognized safeguards for international transfers.

11. Third-party services and sources

Notyfi links to and gathers information from third-party websites, sources, and services. Their privacy practices are governed by their own policies. We are not responsible for third-party privacy or security practices.

12. Changes to this policy

We may update this Privacy Policy as Notyfi changes. We will post the updated policy here and revise the effective date. If a change materially affects your rights, we will provide additional notice when required by law.

13. Contact

Perceptron ML, Inc. is the operator of Notyfi. Questions or privacy requests can be sent to [email protected].