Last updated October 31, 2026
Quill Note is a note-taking app made by Orion Solutions DOOEL, Vlae 8, Skopje, Karpos 1000, Macedonia (“we”, “us”). This policy explains, in plain words, what we collect when you use the Quill Note website (quillnote.ai) and app (app.quillnote.ai), why, and who helps us run the service.
Questions? Write to us through our contact form.
Account details. Your first and last name, email address and password (stored only as a secure hash, never in readable form). We also store your plan, your remaining AI summaries and your settings, such as the light or dark theme.
Your notes. The notebooks, sections and notes you create, including titles, note text and AI summaries. Note text and AI summaries are stored encrypted (see section 3). Notebook, section and note titles are stored unencrypted so the app can list and search them.
Payments. Payments are handled by Paddle, our reseller (see section 4). We never see or store your card details. We receive your subscription status and plan from Paddle.
Technical data. Like most online services, our servers log basic information about each request, such as your IP address and browser type, to keep the service secure and working. These logs are deleted after 5 days.
Messages you send us. If you use our contact form, we receive your name, email address, the topic and your message. We use them only to answer you, and the message reaches our email inbox.
What we don’t collect: audio, recordings of your meetings, your contacts, your location, or data about you from other companies.
Under the EU and UK data protection rules (GDPR), we rely on: our contract with you (providing the service), our legitimate interest (security, fixing problems and anonymous visit statistics) and legal obligations (for example, keeping invoices).
Note text and AI summaries are encrypted before they are stored in our database. Each account has its own encryption key, which is itself protected by a master key managed by Amazon Web Services (AWS Key Management Service). Your notes are never sent to AWS; AWS only protects the keys. Notes and summaries written before February 2026 may still include unencrypted copies of AI summaries and note text.
Connections to Quill Note are always encrypted (HTTPS). Access to our servers is limited to the people who operate the service, and only for running and fixing it.
No system is completely secure, but we work to protect your data and will tell you without delay if a security incident affects it.
We share data only with these service providers, only as far as needed for the purpose listed, and under contracts that require them to protect it:
| Provider | What it does for us | What it receives |
|---|---|---|
| DigitalOcean Frankfurt, Germany | Hosting of our servers, database and backups | All data stored in Quill Note (notes encrypted) |
| Amazon Web Services Stockholm, Sweden | Protects the encryption keys (Key Management Service) | Encrypted keys only, no notes |
| OpenAI United States | Writes AI summaries | The text of a note, only when you press AI Summary |
| Paddle United Kingdom / EU | Payments, invoices and taxes (as our reseller) | Your email, payment and billing details |
| Resend United States | Sends our emails (verification, password reset, contact form messages) | Your email address and the email content |
| Google (Gmail) United States | Our email inbox, where contact form messages arrive | What you write in the contact form |
| Umami United States | Anonymous website visit statistics, no cookies | Pages visited, browser type, country and where you came from; no IP address or personal data is stored |
About OpenAI: a note is sent only when you press AI Summary. OpenAI does not use data sent through its API to train its models. It may keep it for up to 30 days to detect abuse, then deletes it.
When data goes to providers outside the EU, we rely on the safeguards the law requires, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.
We may also share data if the law requires it, or with a buyer if Quill Note is ever sold, in which case this policy continues to apply to your data.
Website (quillnote.ai): we do not use cookies for statistics, advertising or tracking. Visit statistics come from Umami, which counts visits without cookies and without identifying you. The only cookie is a strictly necessary security cookie from our hosting network (Cloudflare) that tells people and bots apart; it expires after 30 minutes. That’s why there is no cookie banner. More in our Cookie Policy.
App (app.quillnote.ai): the app uses your browser’s local storage only to keep you signed in and remember your settings. It does not use analytics or advertising cookies.
You can ask us to:
Send us your request through our contact form, from the email address of your account, and we will answer within 30 days. If you are not happy with our answer, you can complain to your local data protection authority. In Macedonia, this is the Personal Data Protection Agency.
Quill Note is not meant for children under 16, and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
If we change this policy, we will update the date at the top. For important changes, we will also tell you by email or in the app before they take effect.
Orion Solutions DOOEL
Vlae 8, Skopje, Karpos 1000
Macedonia
Contact form