Privacy Policy

Annoto ("we", "us", or "our") operates the Annoto changelog platform available at annoto.co. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. By using Annoto, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account information

When you sign up, we collect your email address and password. If you set up a workspace, we also store your workspace name and any customization settings you configure.

Content you create

We store the changelog posts and announcements you write, including titles, body text, tags, and publication status. This content belongs to you.

Subscriber information

When readers subscribe to your changelog, we collect their email address on your behalf. You are responsible for ensuring your subscribers have consented to receive updates from you.

Usage data

We automatically collect information about how you use Annoto — including page views, widget opens, and feature interactions — to understand usage patterns and improve the service. This data is aggregated and not tied to individual identities where possible.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Annoto service
• Process your account registration and authenticate your identity
• Send transactional emails such as password resets and account notifications
• Deliver changelog notification emails to your subscribers on your behalf
• Analyze usage trends to improve product features and performance
• Respond to support requests sent to support@annoto.co
• Detect and prevent fraud, abuse, or security incidents

We do not use your content to train machine learning models, and we do not sell your data to third parties.

3. Cookies

We use cookies to keep you logged in and to maintain your session across page visits. We may also use cookies to understand aggregate usage patterns on the site. You can configure your browser to refuse cookies, but some parts of the service — such as staying signed in — will not function without them.

4. Data Sharing

We do not rent or sell your personal information to third parties. We may share your information with:

• Service providers — infrastructure and hosting partners (such as cloud providers) who process data on our behalf under confidentiality agreements
• Payment processors — Stripe processes billing information for paid plans; we never store your full credit card details
• Email delivery — a transactional email provider delivers notification emails to your subscribers on your behalf
• Legal requirements — if required by law, court order, or to protect the rights and safety of Annoto and its users

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information and content within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes. Subscriber email addresses associated with your workspace are deleted when your account is deleted.

6. Data Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, disclosure, or destruction. All data is transmitted over HTTPS. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

Annoto is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Portability — request your data in a machine-readable format
• Objection — object to processing of your data for certain purposes

To exercise any of these rights, email us at support@annoto.co. We will respond within 30 days.

9. Business Transfers

If Annoto is acquired, merges with another company, or goes through a similar business transition, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email. Continued use of Annoto after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out at support@annoto.co.