Privacy Policy

Last updated: October 3, 2026

What we collect

OneKB stores the information required to operate your account and your notes library.

  • Account data: email address, authentication provider, and preferences.
  • Notes data: the documents, folders, tags, images, versions, and share links you create.
  • AI access data: API key metadata (never the plain key), tool-call logs, and an audit ledger of AI writes.
  • Usage data: product events such as searches and feature usage, used to improve the product.
  • Billing data: Subotiz and historical Creem customer and subscription IDs, and subscription status. We never store card numbers.
  • Essential cookies: login sessions and language preferences. Anonymous marketing events use a browser session identifier, a referrer hostname and a short campaign code. They do not include note contents or private URL queries. No advertising or third-party analytics cookies.

How we use data

We use your data to run the service: store and render your notes, authenticate you, let AI assistants you authorize read and write your library, process subscriptions, enforce plan limits, and investigate abuse or failures.

We do not sell your data, and we do not use your notes to train AI models.

Service providers

OneKB relies on the following processors to deliver the service:

  • Supabase — authentication, database, and file storage.
  • Vercel — application hosting and delivery.
  • Subotiz — new checkout, subscription billing, and payment webhooks. Creem records are retained for historical subscriptions.
  • Google — optional sign-in with Google OAuth.

Data retention

Deleted documents stay in your trash for 30 days, then are permanently removed.

Document version history keeps the latest 50 versions per document plus all versions from the last 30 days.

Product usage events are retained for 180 days; billing and security records are kept for as long as your account exists.

Anonymous marketing events are retained for 90 days. Temporary private ZIP transfers are cleaned after one day. Recovery drafts remain in your browser until saved, discarded, or cleared at sign-out.

Your rights

Your notes are plain markdown and always yours. You can export your entire library as a zip at any time from Settings.

To delete your account and all associated data, contact support@oneknowledgebase.com.