Privacy statement Notabula

Last updated: 28 October 2026

In this privacy statement you can read which data Notabula processes about you, why, and which rights you have. We handle your data with care and follow the General Data Protection Regulation (GDPR).

1. Who is responsible

Notabula is a service of:

  • Company: Riemersma
  • Address: Nijlânsdyk 145-D, 8931 GA Leeuwarden
  • Chamber of Commerce number: 96579153
  • Email: support@notabula.com

2. Which data we process

  • Your account: your name, your email address and your password (which we only store encrypted, so that nobody can read it).
  • Signing in with Google: if you choose this, Google gives us your name, your email address and an identifier of your Google account. We never receive your Google password.
  • What you put in Notabula: your files, documents, tasks, projects and hours. We store these to provide the service, but we do not look into them. Our administrators cannot see the content of accounts either.
  • Teams: the teams you are a member of, and the email addresses you invite.
  • Your subscription and payments: your plan, your invoices and your payments. For an iDEAL payment we receive from the payment service the name and account number you paid with, and the status of the payment.
  • Technical data: your IP address, your device and browser, when you sign in and what happens in the system (logs). We use these for security and to fix errors.
  • Emails: which emails we send you and whether they arrived.

3. For what purpose and on what basis

  • To provide the service: your account, your workspace, teams, your subscription, invoices, payments and the related emails. This is necessary for the contract with you.
  • To keep our records: we keep invoices and payments because the law requires it.
  • For security: preventing abuse (for example with a check against automated sign-ups), recognising intrusion attempts and tracing errors. We do this because we have a legitimate interest in it: a secure service for everyone.

We do not use your data for advertising and never sell it to others.

4. How long we keep data

  • Your account and your content: as long as your account exists. After the end of your trial or plan your account is read-only for 90 days; after that we delete your account and your own content. If you delete files yourself, they first go to the trash and are then removed permanently.
  • Invoices and payments: 7 years, because tax law requires it.
  • Security logs: at most 2 years.

5. Who else processes your data

We work with service providers that process data on our behalf. Agreements have been made with them about the protection of your data:

  • a hosting provider with servers in Germany, where Notabula and your files are stored;
  • an email service for sending our emails;
  • a payment service for iDEAL payments;
  • a service that checks during sign-up that you are not an automated program.

If you sign in with Google, Google also processes data itself; Google's privacy statement applies to that. We provide data to government authorities when we are legally required to do so.

6. Data outside the European Union

Notabula and your files are stored in the European Union. Some service providers (such as Google for signing in and the check during sign-up) may process data outside the EU. This only happens with the safeguards the GDPR requires, such as a decision of the European Commission or agreements based on the EU standard contractual clauses.

7. Security

We protect your data with an encrypted connection, limited access for our own administrators and checks against abuse. Your content is visible only to you and to the teams you share it with.

8. Cookies

Notabula only uses cookies that are needed to sign in and make the service work. You can read more about this in our cookie statement.

9. Your rights

You have the right to:

  • access your data;
  • have your data corrected;
  • have your data deleted;
  • restrict the processing;
  • object to processing;
  • take your data to another service.

You can do a lot yourself in your profile and your workspace, such as changing your details and downloading your files. For everything else, email support@notabula.com. We respond within one month.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Changes

If we change this privacy statement, you will see this in the date at the top. For important changes we will also let you know by email.