Denote Privacy and Cookies Policy
Your privacy is important to us. Learn how we collect, use, and protect your information.
This Privacy and Cookies Policy explains how Denote Inc Sub, a company registered in Singapore ("Denote," "we," "us," "our"), collects, uses, and protects personal information when you use our website at denote.net our web app, or the Denote Chrome extension (together, our "Services").
Table of Contents
1. Information We Collect
Denote is an ad research platform. We collect a limited amount of information — only what we need to provide, secure, and improve our website, our web app, and the Denote Chrome extension (together, our "Services"). Depending on how you use Denote, this includes:
Information You Provide to Us
When you create an account, subscribe, or contact us, you give us your name, email address, password (stored in hashed form), and workspace or team name. Payment and card details are entered directly with our payment processor, and Denote does not store your full card number. We also keep the messages you send us by email or in-app chat, and the boards, notes, and ad creatives you save in your workspace.
Device and Technical Information
When you use our website or the extension, we automatically receive limited technical data: IP address, browser type and version, operating system, language and region settings, the page you came from, timestamps, and the extension version. We use this to keep your account secure, diagnose errors, and measure aggregate usage.
We do not collect the content of your browsing outside the ad library pages the extension supports. We do not read or store your passwords, form inputs, private messages, email contents, or files. We do not collect mobile advertising identifiers such as Apple IDFA or Android Advertising ID, a list of the apps installed on your device, precise location data, or biometric data. Denote does not build advertising profiles about you.
We may combine the information described above and use aggregated, de-identified statistics to understand how the Services are used. We never combine your information with data from other companies for advertising purposes.
2. What the Denote Chrome Extension Accesses
The Denote Chrome extension runs only on the ad library and ad transparency pages listed below. When you open one of those pages, the extension reads the publicly visible ad data on that page so it can show insights, apply filters, and let you save or download ads.
Pages the extension can access
The extension activates only on ad library and ad transparency pages, including Facebook Ad Library, TikTok Creative Center and TikTok Ad Library, Instagram, Pinterest Ads, Google Ads Transparency Center, YouTube Ads, LinkedIn Ad Library, Shopee, and Etsy. On any other website the extension stays idle and reads nothing.
Ad data the extension reads
Only for the ads you actually view, filter, or save: publicly displayed ad creatives (images and videos), ad copy and landing page text, advertiser or page names, and the metrics the platform itself publishes — for example ad start dates, placements, and, where available, EU transparency reach and spend ranges. The extension does not read anything you type into a page, and it does not collect data about ads you never see.
What stays on your device
Your sign-in token, your preferences (default platform, selected board or folder, current team, and plan), and a small local cache are stored in your browser's extension storage. They stay on your device and are removed when you uninstall the extension or clear its data.
What is uploaded to Denote
Only the following leaves your browser and reaches our servers:
- Ad creatives you choose to download or save are uploaded to our cloud storage (Alibaba Cloud OSS, US West region) so they stay available in your workspace.
- Metadata for the ads you save — ad ID, advertiser or page name, platform, dates, and any metrics shown publicly on the page — is stored with your account.
- Your account token and workspace or team identifiers are sent to our servers to authenticate requests and apply the correct plan and credits.
- Feature usage events, such as which feature you used and when, are recorded so we can operate, secure, and improve the Services.
We never read or transmit page content from websites outside the list above, and we never read what you type into a page. For a policy dedicated to the extension, see our Extension Privacy and Cookies Policy at denote.net/browser-extension-privacy-policy.
3. How We Use Your Information
We use the information described above to operate and deliver the Services you ask for, to keep your account and workspace secure, and to meet our legal obligations. We only process personal information when we have a valid legal basis to do so.
Under the EU and UK General Data Protection Regulation (GDPR), those bases are: performance of our contract with you, meaning providing the Services you signed up for; our legitimate interests, meaning securing the Services, preventing abuse, and improving our product, balanced against your rights; your consent, for example for marketing emails and non-essential cookies; and compliance with legal obligations such as tax and accounting rules. We do not use your personal information for cross-context behavioural advertising.
In practice, we use your information to:
- Provide the core features of Denote, including ad search, filters, boards, and ad downloads.
- Authenticate you, manage your workspace and team, and apply your plan and credits.
- Store and sync the ad creatives, boards, and notes you save.
- Respond to your support requests and service inquiries.
- Send you transactional messages about billing, security, and changes to the Services.
- Send you product news and offers, but only where you have opted in.
- Keep the Services secure, detect abuse or fraud, and enforce our Terms.
- Debug, measure, and improve performance, reliability, and features.
- Meet our legal, tax, and accounting obligations.
We do not sell or rent your personal information, and we do not use it to build advertising profiles about you.
4. Cookies, Analytics, and Consent
Cookies and similar technologies
Cookies are small text files stored by your browser. Denote uses a small number of cookies and similar technologies on our website. We do not use them to track you across other websites, and we do not run third-party advertising cookies on our own site.
Your consent
Non-essential cookies and analytics scripts are not meant to run before you agree to them. Where the law requires consent — for example in the EEA and the UK — we do not load non-essential cookies or analytics until you have given consent, and you can withdraw that consent at any time.
Managing cookies and extension storage
You can block or delete cookies and site data in your browser settings at any time, and you can clear the extension's local storage from your browser's extension settings. Removing this data may sign you out or reset your preferences.
We do not combine data across different websites, devices, or browsers to track you for advertising, and we do not sell or share cookie data with data brokers.
5. How We Share Information
We do not sell your personal information. We do not share it for cross-context behavioural advertising, and we do not hand it to data brokers or ad networks.
We share a limited amount of information with service providers who process it on our behalf so that Denote can run. Each provider is bound by a written agreement that limits it to processing your information on our instructions.
We only share personal information in these limited situations:
- With service providers that help us operate Denote — cloud hosting and content delivery, cloud storage for the ad creatives you save, payment processing, analytics, and live chat support — under written data processing terms.
- With our group companies and affiliates that support our operations, subject to this policy.
- As part of a merger, acquisition, financing, reorganisation, or sale of assets, where information may transfer as part of the business.
- Where we are required to do so by law, regulation, legal process, or a lawful request from a public authority.
- Where we believe disclosure is necessary to protect our rights, prevent fraud or abuse, keep the Services secure, or investigate a violation of our Terms.
We will not share your personal information for any other reason without your consent.
Where sharing involves transferring personal information outside your country, we put appropriate safeguards in place, as described in Section 9.
6. Third-Party Service Providers
We keep our supplier list deliberately short. Each provider below is bound by a data processing agreement and may use your information only to provide its service to us — never for its own advertising.
The third-party services we rely on:
- Cloud infrastructure and content delivery — third-party cloud providers that host our website and deliver assets.
- Cloud storage — Alibaba Cloud OSS (US West region), used to store the ad creatives you save to your workspace.
- Analytics — Google Analytics 4 (Google LLC), used to measure aggregate website traffic and feature usage.
- Live chat and support — Crisp (Crisp IM SAS), used to power the in-app chat widget when you contact us.
- Payments — our third-party payment processor collects and processes your subscription payment details. Denote does not store your full card number.
We do not permit these providers to use your information for their own advertising or marketing. Our website may also link to third-party sites. Those sites have their own privacy policies and we are not responsible for them, so please review their policies before sharing information with them.
7. How Long We Keep Your Data
We keep personal information only for as long as we need it for the purposes described in this policy. When you delete your account, we permanently delete your personal information from our production systems immediately — your saved boards, uploaded ad creatives, and workspace content go with it. This is a real deletion, not a hidden flag on a database row.
In practice, that means:
- Account and profile information — kept while your account is active, and deleted immediately when you delete your account.
- Your saved ads, boards, notes, and uploaded creatives — deleted immediately when you delete your account.
- Backup copies — purged on a rolling basis within 30 days, so nothing persists indefinitely.
- Aggregate analytics — retained in a form that no longer identifies you, so we can keep measuring overall product health.
- Billing and tax records — kept for as long as tax and accounting law requires, and then deleted.
- Support conversations — kept for up to 24 months so we can follow up on earlier questions, and then deleted.
Deleting your account is permanent and cannot be undone. If you would like a copy of your data before you delete your account, you can request an export — see Section 8.
8. Your Rights and Choices
Depending on where you live — including if you are in the EEA, the UK, Switzerland, Australia, or California — you may have specific rights over your personal information. We honour these requests regardless of where you are based.
You can ask us to:
- Give you a copy of the personal information we hold about you, and confirm what we do with it (access).
- Correct any information that is inaccurate, incomplete, or out of date (rectification).
- Delete your account and the personal information we hold about you (erasure).
- Provide your data in a portable, machine-readable format so you can move it elsewhere (data export and portability).
- Restrict or object to certain processing, including marketing and any profiling (restriction and objection).
- Withdraw consent at any time where we rely on consent, for example for marketing emails or non-essential cookies.
- Lodge a complaint with your local data protection authority.
We do not discriminate against you for exercising any of these rights. You will still get the same product at the same price.
How to exercise them
Email us at [email protected] with your request and the email address on your account. We will respond within 30 days, and usually much sooner. Account deletion and data export requests are currently handled by our support team through this address, and an in-product control for both is on our roadmap. If you request deletion, we will confirm once your data has been removed.
9. Security and International Transfers
We protect your information with technical and organisational measures appropriate to the risk, and we limit access to it internally.
Encryption in transit (HTTPS/TLS) for all data sent between your browser, the extension, and our servers.
Access controls and least-privilege permissions, so only staff who need your data can see it.
Regular internal reviews of our data collection, storage, and processing practices.
Firewalls and secure data centres, operated by established cloud providers.
Denote Inc Sub is based in Singapore, and our service providers may process your information in the United States, Singapore, and other countries. Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. No system is perfectly secure, so while we work hard to protect your information, we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy and Cookies Policy from time to time, for example when we add a feature or a new service provider. When we make a material change, we will post the updated policy here, update the "last updated" date above, and, where the change is significant, notify you by email or in the product before it takes effect. We encourage you to review this page periodically.
Questions About This Policy?
If you have any questions about this Privacy Policy or how we handle your personal information, please don't hesitate to contact us.
