Privacy Policy

Last updated: August 31, 2026

This Privacy Policy explains how VNote ("VNote", "we", "us", or "our") handles information when you access or use the VNote website and related features at vnote.io.vn (the "Service").

VNote is a lightweight, URL-based note application. You can normally create, open, edit, and share notes without creating a traditional end-user account.

By using the Service, you acknowledge the practices described in this Privacy Policy.

1. Information VNote Processes

1.1 Note and article content

When you use VNote, we may process information that you choose to place in a note, including:

• the note's unique URL identifier;
• note title;
• author name or other text entered in the author field;
• note body/content;
• selected editor mode;
• creation and update-related timestamps;
• note status information; and
• other content you intentionally add to the note.

For the normal editor, note content is stored in VNote's application database.

For the rich editor, article metadata is stored in the application database while article content is stored in a server-side text file associated with the note.

You decide what information to place in a note. Please avoid storing highly sensitive personal, financial, medical, authentication, or confidential information unless you understand and accept the security characteristics described in this Policy.

1.2 Note passwords and authentication data

If you protect a note with a password:

• VNote stores a cryptographic hash of the password rather than the plaintext password;
• VNote may issue an authentication token associated with that note;
• the authentication token is stored in an essential secure browser cookie; and
• active note-session information may also be held temporarily in server memory.

Password protection is an access-control feature. VNote does not currently provide end-to-end encryption, and a note password does not encrypt the note content at rest on the server.

1.3 Rich-editor images

If you upload images through the rich editor, those images are uploaded to Cloudinary, a third-party media hosting provider used by VNote.

VNote stores references to the images associated with an article. Images that are removed from an article may be deleted from Cloudinary as part of VNote's cleanup process.

Cloudinary-hosted images can be served through direct asset URLs. You should therefore not upload highly sensitive, private, or confidential images to the rich editor if exposure through a direct media URL would create a risk for you or another person.

Cloudinary processes information according to its own privacy terms. See the Cloudinary Privacy Policy.

1.4 Audio transcription

VNote includes an optional audio-transcription tool.

When you use this feature:

1. the selected audio file is temporarily uploaded to the VNote server;
2. VNote sends the audio to Deepgram for speech-to-text processing;
3. Deepgram returns transcription results to VNote; and
4. VNote deletes the temporary local audio file after transcription processing finishes.

VNote does not intentionally store the uploaded audio file as permanent note content merely because you used the transcription tool. If you later insert or save the returned transcript into a note, that transcript becomes part of the note content and is handled like other note content.

Deepgram's processing of submitted audio is governed by its own terms and privacy practices. See the Deepgram Privacy Policy.

Before uploading audio containing another person's voice or personal information, you are responsible for ensuring that you have any permission or legal basis required to process that audio.

1.5 Activity and notification metadata

VNote may store limited note-level activity metadata used for application functionality, such as events indicating that:

• a note was created;
• a note password was set; or
• a note password was removed.

These records may include the note identifier, event type, message, and timestamp.

1.6 Browser storage

VNote uses browser-side storage, including localStorage, for functionality such as:

• remembering UI preferences;
• realtime and notification-display preferences;
• theme/night-mode preferences;
• editor preferences;
• the current or recently visited note identifier;
• editor size or layout preferences; and
• temporary pending note drafts used to reduce the risk of losing recent unsaved typing during short connection or reload interruptions.

Because pending drafts may contain note text, information saved in your browser can be accessible to other people who can use the same browser profile or device.

If you use a shared or public device, consider clearing VNote site data and browser storage when you are finished.

1.7 Cookies

VNote uses essential cookies for authentication-related functionality, including access to password-protected notes and administrative functionality.

Authentication cookies are configured to use security-focused browser attributes such as HttpOnly, Secure, and SameSite where supported by the application configuration.

VNote does not require advertising cookies for its core note functionality.

1.8 Technical and connection information

Like most web services, VNote's server, hosting environment, reverse proxy, security infrastructure, or service providers may process technical information necessary to deliver and protect the Service. This may include information such as:

• IP address;
• request time;
• browser or user-agent information;
• network and connection information;
• requested URL or route;
• error and diagnostic information; and
• other standard server or security metadata.

The exact information retained may depend on current hosting, proxy, and logging configuration.

2. How We Use Information

We use information processed through VNote to:

• provide note creation, editing, reading, and sharing functionality;
• save and synchronize note changes;
• provide realtime updates between clients viewing the same note;
• authenticate access to password-protected notes;
• remember essential interface preferences;
• provide rich-editor image functionality;
• provide optional audio transcription;
• maintain note-level activity notifications;
• detect, prevent, investigate, or respond to abuse, security problems, or technical failures;
• maintain and improve the reliability of the Service; and
• comply with applicable legal obligations or valid legal requests.

We do not use note content for targeted advertising.

3. Sharing and Disclosure of Information

3.1 People who have access to a note URL

VNote is designed around shareable note URLs.

Unless a note is protected by a password, anyone who obtains the note URL may be able to access and edit that note. A note URL should not be treated as a substitute for strong authentication when the content is sensitive.

If you share a note URL with another person, that person may be able to view, change, copy, or further share information contained in the note.

You are responsible for deciding who receives a note URL and whether password protection is appropriate.

3.2 Service providers

We may use third-party service providers to operate parts of VNote. Current examples include:

• Cloudinary for rich-editor image hosting; and
• Deepgram for optional audio transcription.

We may also use hosting, infrastructure, networking, security, backup, or domain/DNS providers as necessary to operate the Service.

These providers may process information on our behalf or as required to provide their services, and their processing may be subject to their own terms, privacy policies, and data-processing arrangements.

3.3 Legal, security, and abuse-related disclosure

We may disclose information when reasonably necessary to:

• comply with applicable law, regulation, court order, or valid governmental request;
• protect the security, integrity, or availability of VNote;
• investigate fraud, abuse, security incidents, or unlawful activity;
• enforce our Terms of Service; or
• protect the rights, safety, or property of VNote, our users, or others.

3.4 Administrative access

VNote's administrative interface is designed to operate primarily on note metadata and statistics rather than presenting raw note content as part of routine administration.

However, VNote is not an end-to-end encrypted service. Authorized operators with appropriate server, database, storage, or infrastructure access may technically be able to access stored information when necessary for maintenance, security, incident response, troubleshooting, legal compliance, or other legitimate operational purposes.

4. Data Storage and Retention

Different types of VNote data are stored differently:

• normal-note content is stored in the application database;
• rich-article content is stored in server-side text files with related metadata in the database;
• rich-editor images are hosted through Cloudinary;
• active authentication/session state may be stored temporarily in server memory;
• pending drafts and UI preferences may be stored locally in your browser; and
• temporary audio uploads are stored locally only while transcription is being processed and are deleted after processing completes.

VNote does not currently promise a fixed retention period for ordinary non-empty notes. Notes may remain stored until they are deleted, removed through administrative action, or otherwise removed as part of Service operation.

Empty or unused notes may be removed through administrative cleanup.

Operational backups may temporarily contain copies of information after the live version has been changed or deleted. Backup copies may remain until they are rotated or removed according to operational procedures.

When an article or note is deleted, VNote may also attempt to remove associated rich-editor images and local article files. Because VNote relies on multiple storage systems and third-party providers, deletion across all systems may not always occur simultaneously.

5. Security

VNote uses technical measures intended to reduce common security risks, including password hashing, secure authentication cookies, server-side authorization checks, input validation, and HTTPS in production deployment.

However, no online service can guarantee absolute security.

Important limitations include:

• VNote is not end-to-end encrypted;
• unprotected notes can be accessed by anyone who obtains their URL;
• people with access to the same note may overwrite one another's changes;
• browser-side pending drafts may remain on the device where they were created; and
• rich-editor images are processed and hosted by a third-party media provider.

Do not use VNote as the sole storage location for information whose loss, disclosure, or corruption would cause serious harm. Keep separate backups of important content.

6. International Processing

Some third-party providers used by VNote may process or store information in countries other than the country where you are located.

By using features that rely on those providers, information may be transferred internationally as necessary to provide the requested functionality, subject to applicable law and the relevant provider's privacy and data-processing terms.

7. Your Choices and Privacy Rights

Depending on your location, applicable law may give you rights regarding personal data, which can include rights to request access, correction, deletion, restriction, objection, or other forms of control.

VNote does not currently require a normal end-user account, so we may not always be able to identify which stored note belongs to a particular individual without additional information.

You can take several actions directly:

• edit or remove information from a note if you still have access to it;
• add or remove note password protection where the feature is available;
• clear VNote cookies and local site storage through your browser;
• stop using Cloudinary-backed image features by not uploading images; and
• stop using Deepgram-backed transcription by not uploading audio for transcription.

For privacy-related requests concerning information stored by VNote, contact us using the address in the Contact Us section. We may ask for information reasonably necessary to locate the relevant data and verify that honoring the request will not improperly expose or delete another person's information.

Requests are handled subject to applicable law, technical feasibility, security requirements, and the rights of other users.

8. Children's Privacy

VNote is a general-purpose note service and is not specifically designed for children.

If you are below the age at which you can lawfully consent to the processing of personal data or agree to online-service terms in your jurisdiction, you should use VNote only with any consent or supervision required by applicable law.

If we learn that information has been processed in violation of applicable children's privacy requirements, we may take reasonable steps to remove or restrict that information.

9. Third-Party Links and Services

VNote may contain links to external websites or rely on third-party services. This Privacy Policy does not govern independent third-party websites or services.

You should review the privacy terms of any third-party service before providing sensitive information to it.

10. Changes to This Privacy Policy

We may update this Privacy Policy as VNote changes or as legal, operational, or security requirements evolve.

When we make changes, we will update the Last updated date at the top of this page. Material changes may also be communicated through the Service when appropriate.

Your continued use of VNote after an updated Privacy Policy becomes effective means the updated Policy will apply to subsequent use of the Service, subject to any additional consent required by applicable law.

11. Contact Us

For questions, privacy requests, or concerns about this Privacy Policy, contact:

VNote
Email: support@vnote.io.vn
Website: https://vnote.io.vn