Privacy policy

Last updated [July 17, 2024]

What does this Policy cover?

This Privacy Policy (“Policy”) describes how Ratta US Inc. and its affiliates (also referred to as “Ratta”, “we”, “us” or “our”) collect, use, and disclose your data when you visit or interact with our website https://supernote.com (“Site”), the Supernote cloud https://cloud.supernote.com (the “Cloud” or “Supernote Cloud”), our Supernote Application and Mailbox Application (collectively the “Apps” or “Supernote Apps”) and the Supernote products (the “Device” or “Supernote Device”). The words “user”, “you” and “your” in this Policy refer to a visitor and/or user of the Site, the Cloud, Supernote Apps and the Device. 

If you are located in the European Economic Area (“EEA”) or the United Kingdom, we will process your personal data in accordance with our EEA and UK privacy policy, found here.

What information do we collect?

A. SITE, CLOUD AND SUPERNOTE APPS

When you visit the Site, the Cloud and the Supernote Apps, we collect certain information about your device, your interaction with the Site, the Cloud and the Supernote Apps, information about you and information necessary to process your purchases. We collect this information either directly from you (such as when you contact us for more information, sign up for our newsletter, or when you provide a testimonial or review), directly from your device (such as from a cookie or similar technology), and in some instances from third parties (such as updated delivery and address information from our postal carriers). You can learn more about our use of Cookies and similar technologies below in the ‘Information about our use of cookies’ section. 

• identity and contact details, including your name, email address, home address, contact number;
• payment and delivery details, including billing and delivery addresses and card details, where you make purchases from us;
• communication information, including metadata, received via emails, SMS, instant messages and calls you make to us;
• technical information, including information related to the browser type or version and device type you use to access our Site, Cloud and Supernote Apps, your IP address, time zone, login data, location information, network; 
• Cloud information, including username and password, shared Google Drive and Dropbox files, file lists, metadata and settings; and
• profile and usage information, including username and password, product preferences, your marketing preferences, including any consents you have given us, data about how you use our Site, Supernote Apps, Cloud or web-based properties, including the products you viewed or searched for, page response times, download errors, error reports, length of visits and page interaction information (such as scrolling, clicks, and mouse-overs). 

B. DEVICE

When you use the Device, the system logs the following information locally to facilitate troubleshooting. Logs are only submitted to us with your consent, which is given by actively submitting logs on the Device.

• logs recording the user operations of Android system, Kernel, and all apps;
• the system status starting from the time the Device is powered on, the data generated by Kernel during the booting process, and the apps (e.g. Notes app or Document app) that are launched after the system has finished booting;
• when using apps, name of the opened file; pen type, pen color, eraser, times of undo and redo, page flip, and other user-triggered functions; the event coordinates of pen drop and lift when writing notes (not the event coordinates of the pen sliding process);
• wi-fi switch status, hotspot list, and the name of connected hotspots;
• the path, name and size of all files that are synchronized.

When you use the Device, the system also logs the following information locally to analyze your preferences and to optimize your experience of the Device. Logs are only submitted to us with your consent, when "Usage and Diagnostics" is enabled on the device.

• for Notes app: the number of times handwriting recognition invoked and the number of strokes recorded, number of times writing in a regular notebook and the number of strokes recorded, number of times a regular note created.
• for Mail app: the number of clicks to receive, view, reply to and send emails.
• for Calendar app: number of times written, number of strokes, number of events created, deleted events.
• Digest: Create Digest, average number of Digest created per book.
• for Word app: the number of times a word document is created, word document keyboard input times, word document handwritten proofreading input times.
• for To-Do app: create and delete tasks, create and delete lists, move tasks, rename tasks. 
• for Atelier app: the number of strokes in handwritten drawing, the number of times the drawing is done on the drawing board, and the operations performed on that drawing.

When you use the Device, we use Firebase to log the following information to analyze your preferences and to optimize your experience of the Device. Logs are only submitted to us with your consent, when "Usage and Diagnostics" is enabled on the device.

• User Operations: Firebase records user interactions within the Device, including button clicks, screen navigation, and log submissions to understand feature engagement.
• Session Data: The duration of each session, including start and end times, is logged to analyze user engagement and session frequency.
• Device Information: Details such as device model, operating system version, and unique device identifiers are recorded to identify and resolve compatibility issues.
• Error Reports: Any crashes or errors encountered during the use of the Device are logged to facilitate troubleshooting and improve stability.
• In-App Behavior: Firebase logs actions within specific features, such as the frequency of specific functions used, preferences set, and user flow through the Device. This data collection helps us to enhance the functionality and user experience of the Device. All data collected is securely stored and used in accordance with our privacy policy.

How do we use your personal data? 

We process personal data for the following purposes:

• To provide you with information about our services and products; 
• To supply you with our services that you have requested and to facilitate your purchase of our products, including verifying your identity and facilitate payments;
• To respond to inquiries or communications from you; 
• To fulfil a contract, or take steps linked to a contract: this is relevant where you make a purchase from us or enter a competition we run. This includes:
• providing customer services and arranging the delivery or other provision of products, prizes or services;
• For our business purposes, including but not limited to:
• providing customer service to you, creating and developing new products and services; 
• to monitor use of our websites and online services, to help improve, troubleshoot and protect our products, content, services and website, both online and offline;
• to recommend features, products, and services that might be of interest to you, identify your preferences, personalise your experience with our services and products and our Site, Cloud or Supernote Apps;
• if you provide a credit or debit card as payment, we also use third parties to check the validity of the sort code, account number and card number you submit in order to prevent fraud;
• to monitor customer accounts to prevent, investigate and/or report fraud, in accordance with applicable law;
• to investigate any complaints received from you or from others, about our Site, the Cloud or Supernote Apps or our products (including the Device) or services;
• in connection with mergers, acquisitions, reorganisations or disposals, or in preparation for any of those activities, as permitted/required in accordance with applicable law;
• in connection with requests from law enforcement, legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation); and
• to invite you to take part in market research.
• Where you give us consent:
• we will send you direct marketing in relation to our relevant products and services, or other products and services provided by us, our affiliates and carefully selected partners; 
• we will use your data to display interest-based ads for features, products, and services that might be of interest to you; 
• we place cookies and use similar technologies in accordance with the information below (see ‘Information about our use of cookies’ section) and the information provided to you when those technologies are used; and
• we use session-replay technologies to record your interactions with the Site to help us diagnose problems and improve our Site. These technologies allow us to watch a playback of user sessions on our Site and capture your activities such as your clicks, mouse movements, scrolls, and keystrokes/key touches when you use our Site and may collect data from and about you. You can opt-out of session recording by contacting us at privacy@Supernote.com.
• For purposes which are required by law:
• in response to requests by government or law enforcement authorities conducting an investigation; 
• in response to a subpoena or court order requesting such information; and
• to report or respond to a cyber incident or data breach. 

Security of your personal data

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Only employees, contractors and agents of Ratta/Supernote Apps may access your information on a need to know basis and only for the purposes set forth in this Policy. 

While we make reasonable efforts to ensure your information is processed and stored in a secure manner, we cannot guarantee the security of data transferred over the Internet and you assume the risk of any such transfer.  

Where is your information stored

Your information will be collected and stored in the United States and China.

Minors

The Site, the Cloud, Supernote Apps and the Device are not intended for individuals under the age of 18. We do not sell products or services for purchase by children. If you are under 18 years old, you may use the Site, the Cloud, Supernote Apps and the Device only under the supervision of a parent or guardian.  In accordance with the Federal Children’s Online Privacy Protection Act of 1998 (COPPA), we do not knowingly collect, solicit or use personal data of children under the age of 13 provided without parental consent. Should we become aware that a user under the age of 13 has registered without verifiable parental consent, any such information will be deleted. If you are the parent or guardian and believe your child has provided us with their personal data, please contact us at the address below to request deletion.

Who will we share this data with, where and when?

We share your data with service providers to help us provide our services and fulfill our contracts with you, as described above, such as IT support, payment providers, customer service or marketing communications. Third parties who perform these operations are only permitted to use the information provided to them to perform their function and for no other purpose. We may share your information with companies affiliated with us, including licensees and joint venture partners, who may be located outside the United States. These parties may only use your information in compliance with this Policy.

We use Shopify to power our online store. You can read more about how Shopify uses your personal data here: https://www.shopify.com/legal/privacy.

We may share your personal data to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

We share information with our various businesses and companies with which we share common control.

In the event there is a change in our corporate structure including, without limitation, by merger, consolidation, sale, liquidation, or transfer of substantial assets, we may, in our sole discretion, transfer, sell or assign users’ information collected on and through the Site, the Cloud, Supernote Apps and the Device to one or more affiliated or unaffiliated third parties or successor in interest.

Behavioural advertising

As described above, we use your personal data to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your personal data here: https://policies.google.com/privacy?hl=en. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We use Facebook Pixels to help us understand how our customers use the Site. You can read more about how Facebook uses your personal data here: https://www.facebook.com/about/privacy.

We use Microsoft UET tags to help us understand how our customers use the Site. You can read more about how Microsoft uses your personal data here: https://privacy.microsoft.com/en-us/privacystatement

We use pixel tags to collect IP addresses, which may then be used to analyze web traffic and derive insights.

We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by following the instructions at the links below:

FACEBOOK - https://www.facebook.com/settings/?tab=ads

GOOGLE - https://www.google.com/settings/ads/anonymous

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

Google user data

Notwithstanding anything else in this Policy, consumer Gmail/Google Drive account information obtained via the Gmail/Drive APIs, is subject to these additional restrictions:

Our Mailbox app may read, write, modify, delete or control Gmail message bodies (including attachments), metadata, headers, and settings to provide an email client that allows users to compose, send, read, delete and process emails and will not transfer this Gmail data to others unless doing so is necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.

Our cloud service may obtain user data, read, delete or control Google Drive file lists, metadata and settings to provide a cloud client that allows users to create, update, delete, upload and download files and will not transfer this Google Drive data to others unless doing so is necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.

We will not use this Gmail/Google Drive data for serving advertisements.

We will not allow anyone to read this data unless we have your affirmative agreement for specific messages, including when doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for our internal operations and even then only when the data have been aggregated and de-identified.

The use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

How long we keep your personal data

We will retain your personal data for our records for as long as is necessary to fulfill the purpose for which it was collected, or unless and until you ask us to erase this information. For more information on your right of deletion, please see the ‘Changing, updating or removing your information’ section below.

Automatic decision making

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.

Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.

Changing, updating or removing your information

You may update, correct or remove your personal data at any time and free of charge by logging into your account or by emailing privacy@Supernote.com. We may ask that you identify yourself and the information you wish to access, change or delete for security purposes, and we will comply with your request as soon as reasonably practicable. By removing some of your information, you may not be able to access some of the features on the Site, Cloud and Supernote Apps. We may keep some of your personal data if required by law and/or for recordkeeping purposes.  

Information about our use of cookies

What are cookies?

A cookie is a very small text document, which often includes an anonymous unique identifier. Cookies are created when your browser loads a particular website. The website sends information to the browser which then creates a text file. Every time the user goes back to the same website, the browser retrieves and sends this file to the website's server. Find out more about the use of cookies on www.allaboutcookies.org. 

We also use other forms of technology which serve a similar purpose to cookies and which allow us to monitor and improve our Site and services, such as pixels, web beacons, tags or log files. When we talk about cookies, this term includes these similar technologies. 

What cookies do we use and what information do they collect?

Necessary cookies: these cookies are required to enable core functionality. Without these cookies, services you have asked for cannot be provided. If you disable these cookies certain parts of the services will not function for you.Analytics cookies: these cookies help us improve or optimise the experience we provide. They allow us to measure how visitors interact with the services and we use this information to improve the user experience and performance of our Site and the services. These cookies are used to collect technical information such as the number of pages visited, which parts of our website are clicked on and the length of time between clicks.

• Functional cookies: We may use cookies that are not essential but enable various helpful features on the Site. For example, these cookies collect information about your interaction with services provided on the Site. 
• Advertising cookies: we use these cookies to collect information about your browsing habits in order to make advertising more relevant to you and your interests. They are also used to limit the number of times you see an advert as well as help measure the effectiveness of an advertising campaign. We may share this information with other parties who help manage online advertising – please see the "Third Party" section below for more details.
• Social media cookies: These cookies are used when you share information using a social media sharing button or "like" button on our platforms, or when you engage with our content on or through a social site such as Facebook or Twitter. These cookies collect information about your social media interaction with the Site, such as whether or not you have an account with the social media site and whether you are logged into it when you interact with content on Site. This information may be linked to targeting/advertising activities. 

The length of time that a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing and persistent cookies last until they expire or are deleted. Most of the cookies we use are persistent and will expire between 30 minutes and two years from the date they are downloaded to your device. 

Purpose	Cookie	Retention
Necessary cookies
Used in connection with access to admin.	_ab	2 years
Used in connection with navigation through a storefront.	_secure_session_id	24 hours
For shops where pricing currency/country set from GeoIP, that cookie stores the country we've detected. This cookie helps avoid doing GeoIP lookups after the first request.	_shopify_country	session
Used for managing customer privacy settings.	_shopify_m	1 year
Used for managing customer privacy settings.	_shopify_tm	30 min
Used for managing customer privacy settings.	_cmp_a	1 day
Used to facilitate updating customer account information.	_storefront_u	1 min
Used to store a user's preferences if a merchant has set up privacy rules in the visitor's region.	_tracking_consent	1 year
Used in connection with shopping cart.	cart	2 weeks
Used in connection with shopping cart.	cart_ver	2 weeks
Set after a checkout is completed to ensure that new carts are in the same currency as the last checkout.	cart_currency	2 weeks
Used in connection with checkout.	c	1 year
Used in connection with checkout.	cart_sig	2 weeks
Used in connection with checkout.	cart_ts	2 weeks
Used in connection with checkout.	checkout	4 weeks
Used in connection with checkout.	checkout_token	1 year
Used in connection with checkout.	dynamic_checkout_shown_on_cart	30 min
Used in connection with checkout.	hide_shopify_pay_for_checkout	session
Used in connection with buyer localization.	keep_alive	2 weeks
Used in connection with merchant login.	master_device_id	2 years
Used in connection with checkout.	previous_step	1 year
Used in connection with checkout.	discount_code	session
Used in connection with checkout.	remember_me	1 year
Used to identify a user after they sign into a shop as a customer so they do not need to log in again.	secure_customer_sig	1 year
Used in connection with checkout.	shopify_pay	1 year
Used in connection with checkout.	shopify_pay_redirect	1 hour, 3 weeks or 1 year, depending on value
Used in combination with mobile apps to provide custom checkout behavior, when viewing a store from within a compatible mobile app.	source_name	session
Stores a digest of the storefront password, allowing merchants to preview their storefront while it's password protected.	storefront_digest	2 years
Used in connection with checkout.	tracked_start_checkout	1 year
Used in connection with checkout.	checkout_session_lookup	3 weeks
Used in connection with checkout.	checkout_prefill	5 min
Used in connection with checkout.	checkout_queue_token	1 year
Used in connection with checkout.	checkout_queue_checkout_token	1 year
Used in connection with checkout.	checkout_session_token	3 weeks
Used in connection with checkout.	checkout_session_token_<<token>>	3 weeks
Used in connection with customer authentication	identity-state	24 hours
Used in connection with customer authentication	identity-state-<<token>>	24 hours
Used in connection with customer authentication	identity_customer_account_number	12 weeks
Used in connection with checkout.	card_update_verification_id	20 min
Used in connection with customer authentication	customer_account_new_login	20 min
Used in connection with customer authentication	customer_account_preview	7 days
Used in connection with checkout.	customer_payment_method	1 hour
Used in connection with checkout.	customer_shop_pay_agreement	20 min
Used in connection with checkout.	pay_update_intent_id	20 min
Used in connection with checkout.	Localization	2 weeks
Used in connection with checkout.	profile_preview_token	5 min
Used in connection with customer authentication	login_with_shop_finalize	5 min
Used in connection with the theme editor	preview_theme	session
Used in connection with the theme editor	shopify-editor-unconfirmed-settings	16 hours
Reporting and analytics
Track landing pages	_landing_page	2 weeks
Track landing pages	_orig_referrer	2 weeks
Shopify analytics.	_s	30 min
Shopify analytics.	_shopify_d	session
Shopify analytics.	_shopify_fs	30 min
Shopify analytics.	_shopify_s	30 min
Shopify analytics relating to marketing & referrals.	_shopify_sa_p	30 min
Shopify analytics relating to marketing & referrals.	_shopify_sa_t	30 min
Shopify analytics.	_shopify_y	1 year
Shopify analytics.	_y	1 year
Shopify analytics.	_shopify_evids	session
Shopify and Google Analytics.	_shopify_ga	session
Shopify analytics.	customer_auth_provider	session
Shopify analytics.	customer_auth_session_created_at	session

Third parties 

Finally, we may use web beacons or similar technologies from third-party analytics providers (like, for example, Google Analytics) that provide you with targeted advertising or marketing communications we believe may be of interest to you, as well as help us compile aggregated statistics about the effectiveness of our promotional campaigns or other operations. These technologies enable the analytics providers to set or read their own cookies or other identifiers on your device, through which they can collect information about your online activities across applications, websites or other products.

You should review the privacy and cookie policies of these services to find out how these third parties use cookies and whether your cookie data will be transferred to a third country. A list of the third parties who place cookies on our Site and services can be found here. 

Purpose	Third party	Retention Period
Analytics and assess site use	Microsoft UET tags	390 days
Analytics and assess site use	Facebook Pixels	180 days
Analytics and assess site use	Google Analytics	26 months
Analytics and assess site use	Hotjar	365 days
Analytics and assess site use	Twitter	90 days
Analytics and assess site use	Reddit	13 months
Analytics and assess site use	Clearbit	365 days
For advertising	Google ADs	18 months

Links to third-party sites

The Site, the Cloud and Supernote Apps contain links to third-party websites, including a third-party website which processes payment. We do not operate, control, monitor, endorse or guarantee those third-party websites. This Policy does not apply to the collection and use of information by such third-party websites. We suggest that you carefully read the privacy policy and other policies of all third-party websites. 

We provide hyperlinks to third-party websites only for the convenience of our users and it is not a recommendation that users access such third-party websites. We do not guarantee the services or goods provided and sold by such third-party websites to Internet users. YOU AGREE THAT YOUR USE OF ANY THIRD-PARTY WEBSITE IS AT YOUR SOLE RISK AND WITHOUT WARRANTIES OF ANY KIND BY RATTA, EXPRESS, IMPLIED OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF TITLE, FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY OR NONINFRINGEMENT. UNDER NO CIRCUMSTANCES SHALL RATTA BE LIABLE FOR DAMAGES ARISING FROM ANY TRANSACTION BETWEEN YOU AND ANY THIRD-PARTY WEBSITE OR FOR ANY INFORMATION APPEARING ON THIRD-PARTY WEBSITES. 

Rights of California residents

Pursuant to California Civil Code Sec. 1789.3, California resident users are entitled to know that they may file grievances and complaints with the California Department of Consumer Affairs, 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834; or by telephone at (800) 952-5210; or by email to dca@dca.ca.gov. For more information about protecting your privacy, you may wish to visit: www.ftc.gov.

If you are a resident of California, you may request that we not share your information with certain affiliates or third-party providers for their direct marketing purposes, and/or you may inquire as to how we have shared your information with third-party providers for their direct marketing purposes. In connection with such request, we will identify the types of information shared and provide you with the names and addresses of the third parties with whom the information was shared. If you would like to receive any such information, please contact us at privacy@Supernote.com.

Do not track

Our Site, the Cloud or Supernote Apps do not recognize Do Not Track signals. Some third parties may collect aggregate information about the users’ online activities over time and across websites when they use the Site, the Cloud or Supernote Apps. While this information does not include personally identifiable information, certain processing activities that combine aggregate information with other information in possession of such third parties could result in the identification of users.

Updates to this Policy

We reserve the right to update and change this Policy from time to time in order to reflect any changes to the way in which we process your personal data or changing legal requirements. Any changes we may make to our Policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Policy.

Contact details

We hope that we can satisfy queries you may have about the way we process your data. For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at privacy@Supernote.com or by writing to 100 N HOWARD ST STE, R, SPOKANE, WA, 99201-0508.

If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with the relevant data protection authority.