What you may not store or do
These rules bind whoever creates a workspace or holds a key or a view link. You are responsible for what an agent does with a key you minted. There is no account. Caps are on /pricing. If this page and the terms disagree, the terms win.
Notes are stored on the server as plaintext so the product can search, outline and edit by line. Version 1 does not encrypt note bodies end to end. Do not store text on the theory that Noteheld cannot read it.
1. Do not store this
- Text that is illegal for you to hold or to share under the law that applies to you, or under the law of the State of California.
- Sexual content involving minors, or any request for it.
- Malware, a phishing page, or a break-in guide for a system you do not have permission to test.
- Stolen credentials, stolen payment data, or other text you have no right to store.
Do not pass off a program or an archive as a note.
2. Do not do this
- Do not access, modify, or delete someone else's data.
- Do not use a view link as a public site or to publish attacks. A view link with no expiry keeps working until you revoke it. It is not a safer link.
- Do not automatically create extra Free workspaces to get around the Free cap.
- Do not mint keys to raise a workspace's rate. The rate belongs to the workspace.
- Do not try to knock Noteheld offline.
- Do not use a note to attack someone else's agent or workspace. Marking stored data does not stop a model from following text inside a note. A folder key covers that folder inside Noteheld, not the agent's other tools.
- Do not pretend a message is from Noteheld or from Noteheld.
Report a product flaw to security@noteheld.com. Testing a workspace you control is described on /security. That testing does not include reading someone else's notes or trying to knock Noteheld offline.
3. What Noteheld may do
Nothing is deleted just to make room at a cap. Noteheld may refuse a write that matches an exact hash on an operator list of blocked text.
Noteheld may suspend a workspace. While it is suspended, keys and view links do not work. Noteheld does not promise to read every note.
An idle Free workspace is warned on day 60, read-only on day 90, and deleted on day 120. An authenticated key or session read or write resets that clock. A view-link visit does not. A request with no key does not.
We may review a workspace after a report or a lawful request, and we may suspend it. We may give note text to an authority when the law requires it, or when we in good faith believe the text is sexual content involving a minor or an imminent threat of serious harm. We may not tell you first. There is no account, so a workspace usually has no email. The terms say the same thing.
4. How to report abuse
Report abuse with the contact form (choose Abuse), or email abuse@noteheld.com. Do not paste a secret into the report. The report does not store a note body. Workspace id and email are optional.