Agents are not seats. Reads are not billed. Overview, search, and change-feed polls are not billed.
$0
Free to start. No card. Search, line edits, history, export, a passkey, and a recovery kit are all included. Free history is thinned, and an unused Free workspace is deleted.
Your notes never expire, and every revision is kept. More notes, more agent keys, and view links to share notes with people.
| Item | Free | Pro |
|---|---|---|
| Price | No charge | $10 a month, or $48 a year |
| Nodes (notes and folders) | 100 | 10,000 |
| Stored size, including revisions | 64 MiB | 2 GiB |
| Max note size | 256 KiB | 1 MiB |
| Agent keys | 3 | 100 |
| Requests per minute, per workspace | 120 | 600 |
| Writes per minute, per workspace | 20 | 120 |
| Searches per minute, per workspace | 30 | 120 |
| Edits in one batch | 20 | 20 |
| History | Every revision for 30 days, then one checkpoint per note per day for 365 days. Current text stays | Every revision is kept. A write past the storage cap fails and deletes nothing |
| View links (share a note with a person) | None | 200 active. You can choose no expiry |
| Change feed | 14 days | 180 days |
| Idle expiry | Warning from day 60. Read-only at day 90. Deleted at day 120 | None |
| Export | Current tree as markdown. Works while read-only, and after a downgrade | Same, plus a revision archive |
| Search, line read and edit, corrections, history, secret scan, passkey, recovery kit | Yes | Yes |
Need more than Pro's limits? Tell us what you need.
Notes are stored on the server as plaintext so the product can search, outline and edit by line. Version 1 does not encrypt note bodies end to end.
The site and API are served over HTTPS. API keys and view-link secrets are stored as SHA-256 hashes. A copy of the database does not contain a usable key. It does contain the note text.
View links are part of Pro. The new-link form starts at 7 days. A view link with no expiry keeps working until you revoke it. It is not a safer link.
Secret scanning is on for every plan. The detector list is finite. The default replaces a match with [REDACTED:type] and says so in the response. You can choose block or warn. Warn stores the secret. Revisions saved before a redaction keep their text.
A leaked master key can read and change the workspace until you revoke it or rotate it. A leaked folder key reaches that folder until you revoke it or it expires, and it does not grant the rest of the workspace.
Those rates belong to the workspace. Minting more keys does not raise them. Opening workspaces is limited per network on every plan. Paying does not raise that rate. A paid workspace does not count toward the cap on active Free workspaces.
On day 60, Noteheld starts a warning on every agent call and on a banner. Noteheld has no address on file to email.
On day 90, the workspace is read-only. Export still works. Writes stop. View links stop. The master key can reactivate it, and that starts the idle count over.
On day 120, the workspace is deleted.
A read or a write with a key or a browser session resets the count. A visit through a view link does not. A request with no key does not. Pro does not expire for being idle.
The checkpoint is the latest revision from that day. Pro keeps every revision. A write past the storage cap fails and deletes nothing.
At a cap, reads still work. A write that would grow the workspace fails. Nothing is deleted to make room, and nothing is dropped in silence.
You pay, switch interval, and cancel on the Plan page of the workspace. Cancellation takes effect at the end of the period you already paid for. The workspace then follows Free limits. The terms at /terms state the refund.
Downgrade does not delete notes. If the workspace is over the Free caps, you can still read it, export it, and make a change that does not grow it. The idle clock starts when the workspace moves to Free.
The terms at /terms are the agreement. If this page and the terms disagree, the terms win. Pro renews at the interval chosen at checkout until you cancel on the Plan page. Prices here do not include a tax line. Taxes, an unpaid charge, and the refund are stated in the terms.
Yes. Cancel anytime, and you are not charged again. A full refund is available within 14 days of a charge. Export works on every plan, at any time, so your notes are never held back.
Warning on day 60. Read-only on day 90. Deleted on day 120. Only a read or write with a key resets the count. Pro has no idle expiry.
No. Notes are stored on the server as plaintext so the product can search, outline and edit by line. Version 1 does not encrypt note bodies end to end. The live database files are plaintext. When the operator's backup key is set, Noteheld takes an encrypted snapshot on a daily schedule and keeps those snapshots for 14 days. A snapshot is a copy of the notes. Restoring an older backup can bring back a key that was revoked after the snapshot, and a workspace that was deleted after the snapshot.
The notes stay. You finish the paid period, then the workspace follows the Free limits. Export works after you cancel and while a Free workspace is read-only. It does not survive deletion on day 120.
The recovery kit is a file on your machine that contains the master key. We do not keep a copy. Anyone with that file can read and change the workspace, mint keys, and rotate the master key. A passkey can sign you in and rotate the master key. We cannot recover the workspace if the master key, the recovery kit, and the passkey are all gone.