Privacy policy

Notaries and signing agents who use Notra ("you"). We collect your information to run your account, and we are responsible for it.

The people in your records (signers, clients, and companies you work with). When you enter someone's name, address, phone number, ID details, or signature into Notra, you are the one who decides what to record and why. We store and process that information for you, on your instructions, to provide the service. We do not use it for our own marketing, and we do not sell it. If you are a signer or client and want to see, correct, or delete your information, please contact the notary you worked with first. If you contact us, we will pass your request to that notary where we can identify them.

Information you give us

• Account details: name, email address, password (stored as a hash by our authentication provider), multi-factor authentication settings and recovery codes, your business profile, logo, and commission or credential details, and a record of which version of our Terms of Service and this policy you accepted at signup, and when.
• Records you create: signings and appointments, clients and companies, invoices and payment status, expenses and receipts, mileage, documents you upload, and team members you invite.
• Journal entries: date and type of notarial act, document description and date, signer name, address, and phone number, identification type, issuing authority and expiration, identification method, credible witness details, signature, fees, and notes. Where state rules allow, an ID number can be recorded, and we store it encrypted. In states that prohibit recording an ID number or a biometric identifier (Texas, for example), Notra is built to leave those out, and it is your responsibility to follow your state's rules (see section 4 of the Terms of Service). A "thumbprint captured" setting records only whether a thumbprint was taken, not the print itself.
• Remote online notarization records: signer name, email, and phone, the provider you used, the provider's session reference, and an optional copy of the sealed document. Notra does not perform remote notarizations and does not store the audio-video recording; the provider holds it.
• Messages and support requests you send us.

Information collected as you use Notra

• Precise location. If you use the journal location stamp, your browser or device asks for permission to share your location, and we record the coordinates, accuracy, and time with that journal entry. If you use your current location as the starting point for a drive-time estimate, your location is sent to Google to calculate the route, and we save only the label "Current location", not the coordinates. We use location only for those features. You can decline the permission prompt or change it in your device settings at any time. Some states and privacy laws treat precise location as sensitive information, so we ask for it only when you use a feature that needs it.
• Drive-time lookups: signing addresses and your starting point are sent to Google Maps to calculate travel time.
• Text and email activity: a log of messages Notra sends on your behalf, delivery status, and opt-out records.
• Device and log data: IP address, browser and device type, pages and actions, and error reports. Our error monitoring tool receives technical details of errors with request contents removed.
• Usage analytics, only if you accept the analytics prompt (see section 6).

Information from other services you connect

• Stripe: your subscription status, and, if you use invoice payments, your connected account status and payment events for your invoices. We never see or store full card numbers.
• Google Calendar, if you connect it once that feature is available: calendar access tokens (stored encrypted) so Notra can show or sync your appointments. See the Google section below.

• To provide and secure Notra: scheduling, drive-time alerts, the journal, invoicing, reports, and team features.
• To bill you and process payments.
• To send service messages: reminders, receipts, security notices, your monthly report email if you have it on, and, on your instruction, reminders to your clients.
• To keep Notra safe, prevent fraud and abuse, enforce our terms, and fix bugs.
• To understand product usage, if you accepted analytics.
• To meet legal obligations.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use it to train advertising profiles, and we do not make automated decisions about you that have legal or similarly significant effects.

We share information only with service providers that help us run Notra, under contracts that limit their use of it:

Supabase

What it does for us: Database, sign-in, and file storage (hosted in the United States)

Vercel

What it does for us: Application hosting and, with your consent, analytics and performance measurement

Stripe

What it does for us: Subscription billing and invoice payments

Resend

What it does for us: Sending email

Twilio

What it does for us: Sending text messages and processing opt-outs, where texting is available

Google

What it does for us: Maps and Places (drive time and address search), and Calendar if you connect it once available

Sentry

What it does for us: Error monitoring

Cloudflare

What it does for us: Bot protection at sign-in

Have I Been Pwned

What it does for us: Checking a new password against known breaches. Only the first five characters of the password's hash leave your browser

We may also disclose information: on a team plan, to the account owner, who can see the signings they assign to a member, including the fee and whether it has been paid, but never the member's journal or the signings a member books on their own; when the law requires it, such as a valid subpoena or court order; to protect rights, safety, and security; and to a successor if Notra is involved in a merger, acquisition, or sale of assets, in which case we will tell you and this policy will continue to apply to your information unless you are told otherwise.

Journal copies. A notary's journal can be a public record in some states, and the notary, not Notra, decides what to release. Notra's journal tools can redact fields before you hand over a copy, but you are responsible for what you disclose.

Google Calendar sync is not available yet. When it is, and if you connect it, Notra's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use calendar data only to provide the calendar features you asked for. We do not use it for advertising, we do not sell it, and we do not allow people to read it except as needed to provide the feature, for security, to comply with law, or with your consent. You can disconnect Google Calendar in Notra, or revoke access in your Google Account.

• Essential cookies and storage keep you signed in and secure the app. These always run, and the app does not work without them.
• Optional analytics in the app (Vercel Analytics and Speed Insights) stay off until you choose Accept. If you choose Reject, they stay off. You can change your choice by clearing the stored setting in your browser, which brings the prompt back.
• Our marketing website (getnotra.com) uses Vercel Web Analytics and Speed Insights to count visits and measure page speed in aggregate. They do not set cookies or identify you across sites.
• We do not use advertising cookies or third-party ad trackers.
• We do not respond to "Do Not Track" signals because we do not track you across other sites.

• Active accounts: we keep your records while your account is open, because you need them. Notaries are often legally required to keep a journal for years (Texas requires ten years, for example), and keeping that record is your responsibility. Export your journal regularly.
• Deleting your account: when you delete your account in Settings, we delete your database records and uploaded files. Deleting also erases your journal, which is why Notra makes you acknowledge that and offers an export first. Backups age out on a rolling schedule after deletion.
• Proof you accepted our terms: when you delete your account, we keep a small record of which version of our Terms of Service and this policy you accepted and when. Your email address is kept with it only as a one-way hash, which can be matched only by someone who already has the address. We keep this record so we can show what was agreed if there is ever a dispute, and we do not use it for anything else.
• Billing and tax records: Stripe and we keep payment, invoice, and tax records as long as the law requires.
• Logs and error reports: kept for a limited period for security and debugging.
• Legal holds: we may keep information longer if we are legally required to, or to resolve a dispute.

You can view and edit most of your information in Notra, export your records, disconnect connected services, change your message and analytics preferences, and delete your account.

Depending on where you live (including Texas and a growing number of other states), you may have the right to: confirm we process your personal information and get a copy; correct it; delete it; get it in a portable format; opt out of sale, targeted advertising, and certain profiling (we do none of these); and not be treated differently for using these rights.

To make a request, email support@getnotra.com from the address on your account. We may need to verify it is you. We respond within 45 days, and we can extend once by 45 more days if we tell you why. If we decline a request, you can appeal by replying to our response with the word "appeal." We will answer the appeal within 60 days and explain how to contact your state attorney general if you are still not satisfied. You can use these rights up to twice per year at no charge.

California residents. In the last twelve months we collected the categories described in section 2 (identifiers, commercial information, internet activity, precise geolocation, and information you place in records), for the purposes in section 3, and disclosed them to the service providers in section 4 for business purposes. We do not sell or share personal information. We use precise geolocation only to provide the features you request.

Text messages. Notra sends texts on behalf of notaries. Reply STOP to any message to stop receiving texts, or HELP for help. Message and data rates may apply. Opting out of texts does not close any account.

We use encryption in transit, encryption at rest through our hosting providers, extra encryption for ID numbers and calendar tokens, row-level access controls so one account cannot read another's data, multi-factor authentication, rate limiting, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you and regulators as the law requires. Please use a strong, unique password and turn on multi-factor authentication.

Notra is for adults conducting business. We do not knowingly collect information from anyone under 18 for their own account. If you think a child has given us information, email us and we will delete it. Records you enter about a minor signer are your records, and you are responsible for entering them lawfully.

Notra is built for United States notaries and stores data in the United States. If you access it from elsewhere, you understand your information will be processed in the United States.

When we make a material change, we will update the effective date above and notify you by email or in the app before the change takes effect. Earlier versions are available on request.

Notra Tech LLC
17350 State Hwy 249, Ste 220 #35788, Houston, TX 77064
support@getnotra.com