Privacy should be understandable.

Depending on how you use Joplin, the service may handle:

• Account information: email address, optional name, profile details, authentication state, and account settings.
• Business information: a website address, business name, offer, audience, goals, brand voice, constraints, approved topics, and other context you provide.
• Public website information: content retrieved from public pages associated with a website you ask Joplin to review. A submitted website does not mean Joplin has reviewed every page.
• Work created in Joplin: prompts, chats, drafts, plans, uploaded media, saved assets, approvals, corrections, and owner-reported progress.
• Hosted-page information: page views and information a visitor chooses to submit through a form, such as a name, email address, phone number, or message.
• Connected-service information: authorization tokens, account or audience identifiers, connection status, and handoff records when you deliberately connect a supported provider.
• Service and security information: product events, usage records, audit history, error information, and hashed signals used for public-form rate limiting.
• Billing information: subscription, invoice, payment-status, and customer identifiers if a payment provider or written founding-pilot arrangement is used. Payment providers, rather than Joplin, handle full card details.

Joplin uses this information to:

• create and secure your account;
• learn the business context you choose to provide;
• prepare marketing recommendations, plans, drafts, hosted pages, and reports;
• apply your approval rules, prohibited topics, pauses, and other operating boundaries;
• operate requested connections and clearly record what a provider can and cannot do;
• deliver hosted pages, record submitted leads, and support customer-requested lead handoffs;
• monitor service reliability, usage, cost, security, and founding-pilot activation;
• respond to support, privacy, billing, and account requests; and
• comply with applicable law and protect the service, customers, and other people.

Relevant business context, prompts, drafts, and task instructions may be sent to the AI provider configured for an action. Joplin currently supports Anthropic and OpenAI. The information sent depends on the task and the provider selected or configured.

Do not enter confidential, regulated, or sensitive personal information that is not needed for the marketing task. Generated work can be incomplete or inaccurate and should be reviewed before it is used. Provider handling is also governed by the provider's applicable terms and privacy practices.

Joplin uses service providers to operate the product. Depending on the feature and current configuration, these may include Vercel for hosting, Supabase for authentication and database services, Anthropic and OpenAI for AI generation, Firecrawl for public website retrieval, Resend for service email, and Stripe for billing.

Information may also be disclosed:

• when you direct Joplin to connect or hand work to another provider;
• to investigate abuse, secure the service, or protect legal rights and safety;
• when required by law or a valid legal process; or
• as part of a business reorganization, financing, acquisition, or transfer, subject to appropriate handling of the information.

A business using Joplin may publish a Joplin-hosted page and collect information from its visitors. That business decides what the page asks for and how it follows up. Joplin stores the submission for that customer and may provide an export or an authorized handoff to a connected email provider. Visitors should direct questions about a business's offer or follow-up practices to that business; privacy or platform questions may also be sent to Joplin.

Joplin keeps account and durable customer work while the account is active or as needed to provide the service. Operational events, audit records, billing records, backups, and security logs may be kept longer when needed for reliability, fraud prevention, support, legal obligations, or dispute resolution. The founding pilot is still finalizing specific retention periods, so Joplin does not represent an unconfirmed universal deletion schedule.

You may request access, correction, export, or deletion. Some information may be retained where required by law, needed to document a transaction, or temporarily present in protected backups before normal expiration.

Joplin uses authenticated access, owner-scoped database controls, server-side ownership checks, encrypted integration tokens, approval policies, and provider disconnect controls where supported. No system is perfectly secure. Joplin does not claim a security certification or a specialized regulatory status that has not been independently confirmed.

Learn more on the Security page.

Joplin uses cookies, session storage, and related browser technologies needed for authentication, security, continuity through signup, and core application operation. Joplin does not currently describe an advertising or cross-site behavioral tracking program. If optional analytics or advertising technologies are introduced, this policy and any required controls will be updated before they are relied upon.

Joplin is intended for business use and is not directed to children. Depending on where you live, you may have additional rights concerning personal information. Contact Joplin to exercise those rights; identity verification may be required before account information is disclosed or changed.

This policy may change as the founding pilot and available providers change. Material updates will be posted here with a new effective date.

For a privacy, access, correction, export, or deletion request, email hello@noettic.co. Include the account email and enough detail to identify the request, but do not email passwords, integration secrets, or unnecessary sensitive information.

Use of Joplin is also governed by the Terms of Service.

Noettic, Inc.
269 South Beverly Drive, #1234
Beverly Hills, CA 90212, United States