Data practices
This page explains, in plain English, what happens to your data when you delete it, what we do if there's a breach, who at CoParentNotes can access your case content, and how we help you see that your own record hasn't been changed after the fact. For the fuller picture of what we collect and why, see our privacy policy.
Deleting your data
When you delete your account or your case data and the deletion finishes, we remove your rows from our database and delete the associated stored files from our active systems. If a deletion fails, nothing is half-promised: you can try again from Settings.
Exported PDFs are stored encrypted in a private folder. We delete each one about an hour after it turns 7 days old. If the emails for an export are never sent, we delete it within about two hours. Deleting your account removes any that are still stored.
If you have a paid plan, we cancel it first when you delete your account. You won't be charged again, and the rest of the current billing period isn't refunded.
Deleted data may still exist in our encrypted backups for a period before those backups rotate and the deleted data is gone from there too. We don't promise instant erasure across every copy everywhere — backups exist precisely so we can recover from failures, and they age out on that schedule.
If there is a breach
If a breach affects your data, we will notify affected users and the relevant regulators as required by law, without undue delay.
Who can access your data
Case data is encrypted in transit and at rest, protected by account sign-in, and walled off from other accounts by row-level security. It is never sold. It is shared only with the service providers that run the app — Supabase (hosting and database), Vercel (website and web app hosting), Resend (account emails), Stripe (payments, with your account email), Forward Email (messages sent to our support addresses), and Anthropic (only for smart suggestions, which stay off until you say yes) — and when the law requires it. See the privacy policy for exactly what each one receives.
We limit access to production case tables to the people who need it to operate or support the service, or to comply with the law — for example, the legal requests described in our legal requests policy.
How we help you see the record wasn't changed
Your whole case record is linked by one running checksum (a hash chain). It covers entries, edits, follow-ups, and attachments. The current checksum is printed in the PDF you export. It is one value for the whole case. It helps you check that your own record has stayed consistent over time.
This chain does not protect against changes made by us, the operator — we control the database it lives in, so it isn't a safeguard against tampering on our end. It also isn't claimed to have any legal effect; it's a visible signal for you, not a legal guarantee.
Contact
Questions about how we handle your data? Email us at security@coparentnotes.com, or see our privacy policy for more detail on what we collect and how we use it.