BlindnoteGenie Privacy Policy

Effective Date: June 9, 2026  |  Version 2.0.0

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address (used for authentication and communication)
• Password (stored only in securely hashed form using bcrypt; we never store plaintext passwords)
• Account preferences and settings

1.2 Documents You Upload

When you use our Service to process documents, whether through the web application or the Word Add-in:

• We receive your uploaded Microsoft Word document (.docx format) for processing
• Documents are processed in memory and/or temporary storage during the active session
• We extract endnote content and body text passages necessary to generate blind note anchor phrases
• A processed document with converted blind notes is generated and returned to you
• Documents are not permanently stored on our servers after processing is complete

1.3 Usage Information

We automatically collect:

• Document processing statistics (number of conversions performed, number of endnotes converted)
• Conversion mode selected (Body Notes or Endnote mode)
• Delivery method used (web application or Word Add-in)
• Session information (timestamps, processing duration)
• IP address and user agent (for security and Terms of Service acceptance audit trails)
• Error logs to improve service reliability
• Remaining free conversion count

1.4 Payment Information

For site license payments, processing is handled entirely by Stripe, Inc., our third-party payment processor. We do not receive, store, or have access to your full credit card numbers, debit card numbers, or banking information. We receive only:

• Transaction confirmation and order identifiers
• General payment status (completed, failed, refunded)
• Last four digits of payment method (for your reference in account history)

1.5 Word Add-in Information

When you use the BlindnoteGenie Word Add-in, we additionally collect:

• Add-in version information
• Microsoft Office version and platform (for compatibility and troubleshooting)
• Authentication tokens used to verify your identity with our processing servers

The Word Add-in does not collect or transmit any data from your Word application beyond the specific document you choose to convert.

2. How We Use Your Information

We use your information to:

• Provide the Service: Process your documents, extract endnote content, generate blind note anchor phrases, and produce converted documents
• Authenticate and secure your account across both the web application and the Word Add-in
• Track conversion usage and enforce free conversion limits and site license terms
• Communicate with you about your account, licensing, and service updates
• Improve our Service through aggregated, anonymized usage analytics
• Detect and prevent fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations

3. Document Processing Architecture

Understanding how we handle your documents is essential to this Privacy Policy:

3.1 Processing Workflow

1. Upload: You upload a Word document to our Service (via the web application or the Word Add-in)
2. In-Memory Processing: Your document is parsed and analyzed in server memory
3. Endnote Extraction: Endnotes are identified and associated body text passages are extracted to generate contextual anchor phrases
4. Blind Note Generation: Blind note entries are created using our proprietary punctuation-hierarchy semantic extraction method
5. Document Assembly: A processed Word document is generated with the converted blind notes and formatted Notes section
6. Download: You download the processed document (or it is returned to the Word Add-in)
7. Cleanup: Temporary data is cleared after your session ends

3.2 What We Do NOT Do With Your Documents

• We do not permanently store your uploaded documents after processing
• We do not use your document content to train AI models
• We do not share your document content with other users
• We do not sell or monetize your document content
• We do not read or review your document content except as necessary to provide the Service

3.3 No Content Caching

4. Third-Party Services

4.1 Payment Processing

Stripe, Inc. handles all site license payment processing. Please review Stripe's privacy policy at https://stripe.com/privacy for information about how they handle payment data.

4.2 Microsoft Office Platform

The BlindnoteGenie Word Add-in operates within the Microsoft Office platform. Microsoft's privacy policies govern data that Microsoft collects through the Office platform itself. We encourage you to review Microsoft's privacy statement at https://privacy.microsoft.com.

4.3 Infrastructure

Our Service is hosted on Google Cloud Platform infrastructure that maintains industry-standard security certifications. Your data is transmitted over encrypted connections (TLS/HTTPS).

5. Data Security

We implement technical and organizational measures to protect your information:

5.1 Technical Safeguards

• Password Protection: Passwords are hashed using bcrypt with salt before storage; we never store plaintext passwords
• Authentication: We use secure token-based authentication for session management across both the web application and the Word Add-in
• Transport Security: All data transmission, including between the Word Add-in and our servers, occurs over HTTPS/TLS encrypted connections
• Access Controls: Database access is restricted and audited
• No Persistent Document Storage: Your documents are processed in memory and not retained after session completion

5.2 Operational Safeguards

• Regular security reviews and updates
• Logging and monitoring for suspicious activity
• Incident response procedures
• Employee access limited to what is necessary for service operation

While we implement these protections, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

• Account Information: Retained while your account is active; deleted upon account deletion request (subject to legal retention requirements)
• Uploaded Documents: Not retained after processing session ends
• Conversion Count: The number of free conversions used is retained as part of your account record
• Transaction Records: Site license payment records retained for accounting and legal compliance (typically 7 years)
• Usage Logs: Retained for up to 90 days for troubleshooting and security analysis
• TOS Acceptance Records: Retained indefinitely for compliance audit purposes

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

7.1 Access and Portability

You may request a copy of the personal information we hold about you.

7.2 Correction

You may update your email address and password through your account settings.

7.3 Deletion

You may request deletion of your account and associated personal information. Note that we may retain certain information as required by law or for legitimate business purposes.

7.4 Objection and Restriction

You may object to or request restriction of certain processing activities.

7.5 Withdrawal of Consent

Where processing is based on consent, you may withdraw consent at any time.

To exercise these rights, contact us at privacy@geniecore.net.

8. Children's Privacy

Our Service is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence. By using our Service, you consent to the transfer of information to the United States and other countries.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses for international data transfers.

10. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of personal information (with exceptions)
• Right to Opt-Out: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@geniecore.net.

11. Do Not Track

Our Service does not currently respond to "Do Not Track" signals. We do not engage in cross-site tracking for advertising purposes.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Effective Date" at the top of this policy
• Notify you via email or through the Service
• For significant changes, request re-acceptance through our Terms of Service flow

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy:

* * *