Privacy Policy
Last updated: October 15, 2026
This policy explains what But Noted collects, what stays on your device, who processes your data and how to delete it. But Noted is operated by But Beautiful ("we"). It covers the Mac app, the web app, the bn CLI, the MCP server and this website. It does not yet cover the iPhone and Android apps. Write to support@butbeautifulco.com with any question.
What stays on your device
- Original recording files. The app records audio and keeps the files on your device. To transcribe a meeting, the app sends its audio through our servers to Soniox, and our servers do not keep a copy.
- Voice profiles and speaker embeddings used to recognize who is speaking. We treat them as biometric data and never upload them.
What we collect
- Account: your email address and display name. You sign in with an emailed link, so we never store a password.
- Your content: pages, comments, artifacts, uploaded files and the meetings you keep in a synced Space, including titles, transcripts, speaker names, notes and meeting context such as attendees and agenda. In a team Space, the people you share a page or meeting with can read it, and every member can read what you share with the whole Space.
- Invitations: the email addresses of people you invite to a Space or a page.
- Page views: the pages you opened most recently, up to 50 per Space, so the app can show your recent pages.
- Agent conversations: your prompts, the Agent’s replies and the tool calls behind them, kept so a conversation can continue on another device.
- Usage and billing: for each AI request, the model, the cost and who made it. For each Agent request we also keep a title made of its first 120 characters.
- Short-lived AI results: live interpretation translations and synthesized speech, kept for 7 days, and transcripts, kept for 15 minutes so the app can fetch them. Apart from these and the Agent conversations above, we do not store the bodies of requests we relay to AI providers or their responses.
- Performance measurements: how long a few actions take in the app, with the app type and version. They contain no titles, search text or ids.
- Security data: your IP address and email address in rate-limit records, and a random identifier for each app installation, used to record which device approved an Agent action.
How we use it
We use this data to run the service: to sync your Spaces across devices, search them, transcribe meetings, run the Agent, show your AI usage and charge credits, keep the service secure and answer you when you contact us. We do not sell your data and do not use it for advertising.
Service providers
| Provider | Purpose | Data it receives |
|---|---|---|
| Cloudflare | Hosting, storage, email for sign-in links, invitations and sharing notices, and meaning-based search | Everything stored in the service |
| Soniox | Speech-to-text, live translation and spoken live interpretation | Meeting audio; while transcribing, the meeting title, agenda, attendee names, Space member names, glossary terms and terms from the Space guide; translated text to be spoken |
| OpenRouter and the model provider it routes to | AI models for the Agent, live interpretation and other AI features | Your prompts and the content the AI reads for them |
Speech for transcription and every Agent request go from your device through our servers to these providers. We delete the audio we upload to Soniox once the transcript is saved, and Soniox states that it does not train on audio or transcripts. When a request goes through OpenRouter, we ask it to use only model providers that do not collect your data. If you or your Space register your own Soniox or AI provider key, requests on that key go to that provider’s account under its terms. These providers process data in the United States and in other countries where they operate.
Sharing and public pages
Nothing you write is public unless you share it. Choosing Anyone with the link lets anyone with the URL read that page or meeting in But Noted without signing in. Public access also applies to child pages that inherit that setting. A public meeting includes its publicly accessible notes and transcript, including speaker names and the translation shown in the transcript. While recording, readers see the transcript, in-progress captions and the translation the recorder turned on as they arrive. To limit how many live connections one reader can open, we use the reader’s IP address only while the connection is open and do not store it. Original audio is not shared, and the link does not grant access to private pages, private ancestors, Space membership or Agent conversations.
Public page and meeting data responses use no-store, and the service checks public access on every fetch. Turning public access off blocks the next fetch, including the viewer’s periodic refresh, and closes the reader’s live transcript connection; it cannot remove copies a reader has already saved. Existing shared-note links still show only that note’s title and body until revoked. Shared notes and public pages and meetings are marked noindex, but published HTML artifacts are not, so search engines may index them. Agents and apps connected to your account or Space can read and change what they are given access to. An MCP server you register receives what the Agent sends to its tools.
The live demo
The live demo on this website runs in your browser. It shows a sample Space and keeps what you do in it in the page’s memory. Until you start writing a message to the demo’s Agent, pick a suggested message, or ask the Agent to act (such as writing meeting notes), it sends nothing to us while you look around, search or edit. When you do any of these, even if you never send a message, the demo creates a temporary anonymous account with a random id and no email address, and uploads the sample Space with your changes so the Agent can work on it. After that, the demo also sends any further changes you make to that account until it is deleted. About 1 hour after the account is created, we delete it together with its Space, pages, meetings, uploaded files and Agent conversations. Agent request records without their titles and usage records stay, keyed by the account’s random id. Agent turns in the demo use a fixed model through OpenRouter. Please do not enter personal information in the demo.
Cookies and browser storage
This website sets no cookies and uses no analytics or advertising trackers. The app sets only the cookies it needs to work, such as the one that keeps you signed in, and keeps a copy of your Spaces in your browser’s storage so it can open pages quickly. The browser also saves your preference for opening links in the desktop app. In your browser, the live demo keeps its sample Space only in the page’s memory and sets no cookies.
Retention and deletion
We keep your data while your account exists. Some records have their own retention:
- Performance measurements: 3 months.
- Live interpretation translations and synthesized speech: 7 days.
- Transcripts waiting for the app: 15 minutes, then deleted by an hourly cleanup.
- Rate-limit records keyed by your email address or IP address: deleted about a day after their last use.
In Settings you can export your account data and delete your account. Deleting your account deletes your sessions, memberships, Agent conversations, the titles of your Agent requests, your recent page views, rate-limit records keyed by your email address, personal tokens, the connections you approved for agents and apps, registered AI keys and MCP servers, and the Spaces where you are the only owner, with their content and share links. Spaces that have another owner keep what you added to them. These records remain after you delete your account:
- A hash of your email address, kept so the sign-up credit is granted only once.
- AI usage, billing and audit records keyed by account id. Audit records include the email addresses of people you invited.
- Agent request records without their titles: the Space, page or meeting, model, cost, installation identifier and conversation of each request.
- Space apps you registered, which stay installed in the Spaces that use them.
- Invitations sent to your email address, which stay with the Space that sent them, together with that Space’s audit record.
Data on your own devices stays until you delete it there.
Your rights
Depending on where you live, including under the GDPR and Korea’s Personal Information Protection Act, you can ask to access, correct, export or delete your data and to restrict or object to its processing. Write to support@butbeautifulco.com.
Security
Sign-in links, sessions and personal tokens are stored only as hashes. API keys you register for AI providers and secrets you register for MCP servers are encrypted at rest. Private content requires the appropriate membership or page access. Public page and meeting links are checked against the page’s current access settings on every fetch.
Children
But Noted is not intended for children under 14.
Changes
When our practices change, we update this page and the date above.