Privacy Policy

Last updated: July 26, 2026

World AI Link ("WOAIL", "we", "us") operates WOAIL Note ("the Service"), an AI-native note-taking application. This Privacy Policy explains how we collect, use, store, and protect your data when you use the Service.

1. Information We Collect

• Account data: email address, password hash (PBKDF2-SHA256), and optional display name.
• Note content: all text, images, and attachments you create or upload, including voice recordings and imported data.
• Usage data: login timestamps, IP addresses, device type, and interaction logs for security and analytics.
• AI processing data: note content submitted to AI models for summarization, auto-tagging, knowledge graph generation, and voice-to-note features.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To process AI-powered features such as note summarization, auto-tagging, knowledge graph generation, and insight discovery.
• To authenticate your identity and prevent unauthorized access.
• To synchronize your notes across devices and sessions.
• To communicate with you about updates, security alerts, and support requests.
• To comply with legal obligations and law enforcement requests.

3. AI Features and Data Processing

WOAIL Note provides AI-powered features including note summarization, auto-tagging, knowledge graph generation, voice-to-note conversion, and insight discovery. The following principles apply to all AI processing:

• On-demand processing: AI features are activated only when you explicitly request them (e.g., generating a summary or tags). Notes are not continuously scanned by AI in the background.
• No model training: We do not use your note content, personal data, or AI interaction history to train, fine-tune, or improve any AI models.
• User control: You may disable AI features at any time in Settings. Disabling AI features will not affect core note-taking functionality (creating, editing, and organizing notes).
• Accuracy disclaimer: AI-generated summaries, tags, and connections are provided for reference only and may contain inaccuracies. You are responsible for reviewing AI-generated content before relying on it.
• Data minimization: Only the relevant note content is sent for AI processing. AI results are returned to your session and not permanently stored unless you choose to save them.

4. Legal Basis for Data Processing

If you are located in the European Economic Area, United Kingdom, or other jurisdictions with data protection laws, we process your personal data under the following legal bases:

• Contract performance: processing necessary to provide the note-taking service you requested, including account creation, note storage, and synchronization.
• Legitimate interests: processing for security monitoring, fraud prevention, service stability, and bug detection, where our interests do not override your rights and freedoms.
• Consent: processing for optional AI-powered features, which you may withdraw at any time by disabling AI features in Settings.
• Legal compliance: processing required to meet legal obligations, such as responding to lawful requests from authorities.

5. Data Storage and Security

Your data is stored on our global edge infrastructure using encrypted databases, object storage for attachments, and secure key-value stores for sessions. All data is transmitted over HTTPS/TLS encryption. Passwords are hashed using PBKDF2-SHA256 and never stored in plaintext. Note attachments are stored in encrypted storage buckets.

Access to production systems is restricted to authorized personnel using multi-factor authentication. We conduct regular security reviews and monitor for suspicious activity.

6. Data Disclosure and Sharing

We do not sell, rent, or trade your note content or personal data. We may disclose data only in the following circumstances:

• Law enforcement: when required by valid legal process (subpoena, court order, or other lawful request), we may disclose data necessary to comply with the obligation.
• Security and safety: to protect the rights, property, or safety of WOAIL, our users, or the public from harm, fraud, or abuse.
• Business continuity: in the event of a merger, acquisition, or asset transfer, data may be transferred to the successor entity, subject to the protections of this Privacy Policy.

We will notify you via email before disclosing your data in response to a legal request, unless we are legally prohibited from doing so.

7. International Data Transfers

WOAIL Note operates globally. Your data may be processed and stored in data centers located in countries other than your country of residence. When transferring data across borders, we rely on appropriate legal mechanisms (such as Standard Contractual Clauses) and ensure that the receiving parties provide a level of data protection consistent with applicable laws.

8. Cookies and Local Storage

The Service uses localStorage and session tokens to maintain your login session. We do not use third-party tracking or advertising cookies. No analytics cookies are deployed.

9. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal. Because there is currently no industry consensus on how to interpret DNT signals, we do not currently respond to them. We do not use third-party tracking cookies or advertising networks. This Privacy Policy and our data practices are independent of DNT settings.

10. Data Retention

Your notes and data are retained for as long as your account is active. You may delete individual notes at any time. Account deletion requests can be sent to support@woail.com, after which all associated notes, attachments, and data will be permanently deleted within 30 days.

Security logs (such as login IP records) are retained for up to 90 days for fraud detection and security auditing purposes, then automatically purged.

11. Your Rights

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your account and all associated data.
• Portability: export your notes in standard formats (Markdown, JSON).
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdrawal of consent: withdraw consent for AI processing at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@woail.com. We will respond within 30 days.

12. Account Security Responsibilities

You are responsible for maintaining the security of your account:

• Use a strong, unique password and enable two-step verification (TOTP) if available.
• Do not share your password or session token with anyone.
• Only mark devices as "trusted" if you have sole control over them.
• Notify us immediately at support@woail.com if you suspect unauthorized access to your account.

We are not liable for losses resulting from compromised credentials that you failed to safeguard.

13. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

14. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be notified via email at least 30 days before taking effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

15. Contact Us

Questions about this Privacy Policy? Contact us at support@woail.com.