Privacy policy
The short version: your content is yours, we process it only to provide the service, you choose where it lives, and it exports the day you ask.
1. Who we are
BlokNotes is a connected workspace operated from Belgium. This policy explains what personal data we process when you visit this website or use the BlokNotes application, and which rights you have under the General Data Protection Regulation (GDPR).
2. Data we process
Account data: when you create an account we process your name, email address and profile picture through our authentication provider (Clerk).
Workspace content: the notes, records, files and documents you create belong to you. We process them solely to provide the service — storing, rendering, searching and exporting them at your instruction.
Usage data: we collect basic technical logs (such as request metadata and error reports) to keep the service reliable and secure.
Marketing analytics data: we use approved UTM campaign parameters, landing-page and ad-group labels, page visits, signup CTA activity and whether a first Free workspace was created to evaluate our campaigns in Umami. We do not collect Google click IDs, verified client identities or workspace content in these events.
We also measure aggregate demo engagement: demo opens, successful note-writing actions, signup steps and the source page, button and language. Referral context may be kept in session storage and passed to signup. These events never include note text, titles, search queries, emails or user identifiers.
3. AI features
When you use AI features, the content needed for your specific request is sent to the model provider you selected (OpenAI, Anthropic or Google) to generate a response. Your content is not used to train these models. If you connect your own API key, requests are processed under your own agreement with that provider.
4. Where your data lives
You choose a data region per workspace — EU or US — when creating it. Generated documents can be archived to your own Google Drive only when you explicitly connect it.
5. Sharing and third parties
We do not sell personal data. We share data only with the processors needed to run the service: authentication (Clerk), paid subscriptions (Stripe), cloud hosting and storage, email delivery, and the AI providers you choose to use.
BlokNotes does not install the Google Ads tag, send website conversion events to Google, or enable remarketing and advertising personalization.
6. Cookies
The application uses functional cookies required for authentication and session management. We also use privacy-focused Umami analytics for aggregate page and product events.
The marketing site does not use a Google Ads tag or optional advertising-measurement cookies. Approved UTM campaign context, ad-group and landing-page labels may be kept in session storage while you move from the marketing site to workspace signup so aggregate campaign performance can be reported in Umami. Google click IDs are ignored rather than stored or forwarded.
7. Retention and deletion
Workspace content is retained while your account is active. You can export your workspaces at any time and delete workspaces yourself; deletion flows include a soft-delete window to protect against accidents, after which data is removed.
8. Your rights
Under the GDPR you have the right to access, rectify, export and erase your personal data, to restrict or object to processing, and to lodge a complaint with your supervisory authority — in Belgium, the Gegevensbeschermingsautoriteit (Data Protection Authority).
To exercise any of these rights, contact us at hello@bloknotes.app.
9. Changes to this policy
We will update this policy as the product evolves. Material changes will be announced in the application or through another appropriate service notice before they take effect where required.