Privacy Policy

Evernote updated its Privacy Policy on October 1, 2026. The most consumer-relevant changes: it quietly removed its explicit promise not to share your data with third parties for advertising and added new language permitting disclosure for personalized ads and ad measurement on other companies' platforms (like social media). It also added a new opt-in 'meeting detection' feature that can monitor your microphone, which app is running, and your window titles; broadened the conditions under which it will hand data to law enforcement while softening its notice commitment; and extended how long customer-support data is kept (3 years to 5 years). On the positive side, it shortened how long deleted content lingers in backups (1 year to 60 days), raised the age threshold for child-data protections (16 to 18), added support for the Global Privacy Control opt-out signal, and tightened its promise not to use your notes to train AI models.

Dropped its no-third-party-advertising-sharing promiseEvernote used to tell you flat out that it never shares your data with outside companies…

Evernote used to tell you flat out that it never shares your data with outside companies for their own advertising. That line is gone. Now the policy says it may give your data to third parties for personalized advertising and to measure ads shown on other companies' sites and apps (including social media). Even though this is tied to your 'privacy choices,' it's a real expansion of who can get your data and for what purpose.

“We do not share your personal data with any third parties for their own advertising purposes.”

What you can do — Open the 'Your Privacy Choices' link at the bottom of evernote.com and the cookie preference center to opt out of personalized ads and ad sharing.

DATA SHARING

New 'meeting detection' tracks your microphone, apps, and window titlesA new opt-in feature watches whether your microphone is on, which app is using it, and the…

A new opt-in feature watches whether your microphone is on, which app is using it, and the titles of your open windows so Evernote can suggest recording or transcribing a meeting. Window titles can reveal sensitive information (document names, other apps you're using), so this is a meaningful new category of data collection, even though it's opt-in.

“Whether your microphone is in use, which app is using it, and the titles of your active windows, only if you turn on meeting detection.”

What you can do — Leave 'meeting detection' turned off in settings if you don't want Evernote monitoring your microphone status, active apps, and window titles.

DATA COLLECTION

Audio/video transcripts no longer promised to keep speakers unidentified; transcription sent to outside providersThe policy dropped language promising that transcripts distinguish speakers 'without…

The policy dropped language promising that transcripts distinguish speakers 'without identifying them,' and now separately names third-party 'transcription providers' who process your audio/video data on Evernote's behalf.

“service providers who process data on our behalf, such as credit card processors, transcription providers, and customer management systems”

DATA COLLECTION

Customer-support data now kept 5 years instead of 3If you've ever contacted customer support, that data used to be deleted after a maximum of…

If you've ever contacted customer support, that data used to be deleted after a maximum of 3 years. It's now grouped with legal-compliance data and can be kept for up to 5 years.

“we retain personal data processed for customer support purposes or for compliance with legal obligations for a maximum of five (5) years from your most recent interaction”

DATA RETENTION

Broader, vaguer grounds for giving your data to authorities, and a weaker notice promiseEvernote can now disclose your data to law enforcement not just when legally required, but…

Evernote can now disclose your data to law enforcement not just when legally required, but also based on its own 'good faith belief' that it's necessary to protect safety or property — a broader, more subjective standard. It also softened its promise to notify you, from 'we will notify you' to only 'a reasonable effort' to notify you.

“We will not disclose your personal data to law enforcement or other governmental authorities unless we believe it is legally required, or we have a good faith belief that disclosure is necessary to protect the rights, property, or safety of our users or others.”

DATA SHARING

Can now connect third-party AI services to your accountThe policy now explicitly allows connecting third-party AI services (e.g., Claude,…

The policy now explicitly allows connecting third-party AI services (e.g., Claude, ChatGPT) to your Evernote account. If you do, those services can access some or all of your data, including your Content, under their own separate privacy terms that Evernote doesn't control.

“including third-party apps in the App Center or third-party AI services”

What you can do — Only connect third-party AI services to your Evernote account if you've reviewed and are comfortable with their own privacy policies.

DATA SHARING

20261002_rev01COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+**Effective Date: Jan 1, 2026**
+**Last Updated: October 1, 2026**
 **If this Policy is translated into any language other than English, in the event of a conflict, the English language version shall govern to the fullest extent permitted by applicable laws.**
 [**Return to Privacy Center**](https://evernote.com/privacy)
 ## Introduction
+With this privacy policy, we explain what information we collect, use, and disclose about you when you access or use Evernote websites and applications, which we refer to collectively as the Evernote Service (defined in the [Glossary](https://evernote.com/legal/glossary)), contact the customer service team, engage with us on social media, or otherwise interact with us.
+With this Privacy Policy, we explain what information we collect, use, and disclose about you when you access or use Evernote websites and applications, which we refer to collectively as the Evernote Service (defined in the [Glossary](https://evernote.com/legal/glossary)), contact the customer service team, engage with us on social media, or otherwise interact with us.
+We provide this privacy policy in accordance with Regulation (EU) 2016/679 - General Data Protection Regulation ("**GDPR**"), the Italian Legislative Decree 196/2003 (as amended), and other applicable local laws, as amended or replaced (collectively, "**applicable privacy laws**").
+We provide this Privacy Policy in accordance with Regulation (EU) 2016/679 - General Data Protection Regulation ("**GDPR**"), the Italian Legislative Decree 196/2003 (as amended), and other applicable local laws, as amended or replaced (collectively, "**applicable privacy laws**").
+This Privacy Policy covers processing activities we perform as the data controller. The activities that we perform as a data processor are regulated by our [Enterprise Data Processing Addendum](https://evernote.com/legal/dpa) ("DPA").
 Please note, if you are an Individual Account user, you are both the Account Holder and End User of an Evernote Service account. If you use Evernote Enterprise, the Account Holder is the Customer who has contracted with Evernote as defined in the [Evernote Enterprise Agreement](https://evernote.com/legal/business) and the End Users are the individuals whose user accounts are linked to that Evernote Enterprise account. You can find these and other defined terms used in this policy in the [Glossary](https://evernote.com/legal/glossary).
 If you are an End User of an Evernote Enterprise account, please note that the Account Holder of your Evernote Enterprise account (such as your employer or organization) may have established its own rules regarding End Users' access, use, disclosure, or retention of data stored in that account. Also note that while an Administrator of an Evernote Enterprise account has access to the End User accounts linked to that Evernote Enterprise account, an Administrator cannot access any other accounts that are not linked to the Evernote Enterprise account. You can find more information on how your individual Evernote Service account works with your Evernote Enterprise account by visiting [https://help.evernote.com/hc/articles/209005287](https://help.evernote.com/hc/articles/209005287).
 Although significant changes are rare, this policy may be amended as new features, technology, or legal requirements arise, so please check back from time to time. We'll notify you if we make a significant change and, where required, seek your consent.
+## Who is the data controller and data protection officer and how to contact us?
+As always, our approach is guided by Evernote's [Three Laws of Data Protection](https://evernote.com/privacy/3-laws-of-data-protection): your data is yours, your data is protected, and your data is portable.
+## Who is the data controller and data protection officer and how can you contact us?
 **Bending Spoons S.p.A.** is the data controller. We're an Italian tech company based in Via Nino Bonnet 10, Milan, MI 20154.
+If your account is part of a business subscription provided by your organization, then your organization acts as the data controller and we process personal data on its behalf as a data processor, in accordance with its instructions. In any case, we may still process certain personal data as a data controller for specific purposes (for example, complying with our legal obligations, ensuring the security and integrity of our Services, improving our Services, or preventing fraud and misuse).
 For any requests about how we use your personal data or to contact our **Data Protection Officer**, you can reach us by post or by using our [web form](https://privacy.bendingspoons.com/topic/evernote).
 ## What data do we collect?
 You can input, upload, or store in the Evernote Service any text, images, and other data that you choose-we refer to that information as "Content". We also collect the following types of personal data:
 - **Basic subscriber information**. To open your account and process payments, we collect personal data like your email address and, depending on how you purchase a subscription to a Paid Service, your billing address and other payment information. We also may link your subscriber information with data we collect from our partners and other third parties to help understand your needs and provide you with a better experience. For example, if you create or log in to an Evernote account using your Google Apps credentials via single sign-on, we will have access to certain information such as your name and email address as authorized in your Google Apps profile settings.
+- **Usage data.** We collect and log Internet or other electronic network information on how you and others access and use Evernote, for example, the act of creating a note or sharing a note. Usage data may be collected through cookies and similar technologies. For more information, including how to opt-out, visit our [Cookie Notice](https://evernote.com/privacy/cookies).
+- **Usage data.** We collect and log Internet or other electronic network information on how you and others access and use Evernote, for example, the act of creating a note or sharing a note. Usage data may be collected through cookies and similar technologies. For more information, including how to opt out, visit the section "How do we use cookies and similar technologies?" of this Privacy Policy.
 - **Location information.** We collect the IP address you use to connect to the Evernote Service and - if you choose to share it - your location information from a mobile device.
 - **Device information.** We collect information about the number and type of devices you use to connect to the Evernote Service, as well as information about the operating systems on those devices (e.g., iOS, Android, Windows) and the version of Evernote. For example, when you install, modify, or use an Evernote application we may collect personal data in order for the services to function properly, such as your device's unique hardware identifiers (IMEI, SIM number, or other identifier). When you install, modify, or use an Evernote application, you may see permission requests or alerts regarding the device capabilities the application could potentially use.
 In addition, we collect the following types of personal data when you use the Evernote Service:
+|
+Type of Information
+Type of Personal Data
+ |
 Purpose
  | | | |
 To verify your email address to help prevent spam, fraud, and abuse.
  | | | |
+|
+Your name, image, and other personal information, if you choose to share it
+Your name, image, and other personal data, if you choose to share it
+ |
+To display in your user profile, which may be visible to those with whom you share Content or whose Content you access.
+To display in your user profile, which may be visible to those with whom you share Content.
  | | | |
+|
 The geographic area from which your computing devices interact with the Evernote Service, your preferred language, and, if you select the option to share it, your mobile device location information
 To help you monitor use of your account, we make recent IP address history available to you through your account settings.
 To assist us in complying with legal restrictions that may limit the permissible use of the Evernote Service.
 To help you discover relevant content.
+To inform product development and marketing efforts, including advertising efforts as described on our
+To inform product development and marketing efforts, including advertising efforts as described in the section "How do we use cookies and similar technologies?" of this Privacy Policy.
+[Cookie Notice](https://evernote.com/privacy/cookies).
  | | | |
+|
 Your device information
+ |
 To show you (on your account's Access History page) which of your devices you have authorized to access your Evernote Service account and when you last accessed the Evernote Service from each device.
+To inform our product development and marketing efforts, including our advertising efforts as described on our [Cookie Notice](https://evernote.com/privacy/cookies).
+To inform product development and marketing efforts, including advertising efforts as described in the section "How do we use cookies and similar technologies?" of this Privacy Policy.
 To allow you to redeem a promotional offer.
 To provide account support.
 Together with purchase information, to help us comply with export laws.
 Your telephone number, if you choose to share it
+ |
 To help prevent spam, fraud, and abuse.
+To contact you, if you have given your consent to be contacted by phone.
  | | | |
+|
 Your calendar information, only if you select the option to share it
+ |
 To show you relevant Content to which you have access and to help you create and remind you of Content.
  | | | |
+|
+Actions you perform when using the Evernote Service (e.g., creating a note or sharing a note, pasting a URL into a note)
+Actions you perform when using the Evernote Service (e.g., creating a note or sharing a note)
+ |
 To administer the Evernote Service and to improve the features and usability of the Evernote Service.
 To suggest features, products, and services that can enhance your use of the Evernote Service.
+|
 Your audio or videos
+ |
+To enable you to use audio- and video-related features such as generating a transcript that distinguishes between speakers without identifying them.
+To enable you to use audio- and video-related features.
  | | | |
+|
+Whether your microphone is in use, which app is using it, and the titles of your active windows, only if you turn on meeting detection.
+ |
+To detect when a meeting or call is in progress and prompt you to enable recording and transcription features.
+ | | | |
+|
 A record of the source website from which you save Content
+ |
 If you use the Web Clipper browser extension or "Save to Evernote" button, to record in the note created by Web Clipper the source of the material you've chosen to clip (e.g., the URL) for your future reference. This source-recording functionality will not be affected by your browser's do-not-track settings.
  | | | |
 **Please Note:** If you have installed Web Clipper, when you visit certain websites, Web Clipper may notify you of available integrations with the Evernote Service or about products, services, or features that we think will help you get more out of the Evernote Service. Web Clipper does not track or create a record of your browsing activity.
+Additional information we collect in connection with Evernote Enterprise accounts:
+Additional personal data we collect in connection with Evernote Enterprise accounts:
+|
+Type of Information
+Type of Personal Data
+ |
 Purpose
  | | | |
  | | | |
 If you visit an Evernote website, we may also collect:
+|
+Type of Information
+Type of Personal Data
+ |
 Purpose
  | | | |
+|
 Information from cookies and similar technologies
+ |
+Please see our [Cookie Notice](https://evernote.com/privacy/cookies)
+Please see the section "How do we use cookies and similar technologies?" of this Privacy Policy.
  | | | |
 **Information we derive**
 We may derive information or associate categories with you based on the information we or our providers collect. For example, we may make a determination about your location based on your IP address.
 - **Perform and personalize the Services.** We use your personal data to provide you the Evernote Service, including to process transactions with you. We use a number of technologies to help you get the most out of the Evernote Service. Our systems automatically analyze your data to power Evernote features and to continually improve the Evernote Service for you in a way that does not require anyone to look at your Content. This may include, for example:
     \- Making sure you find what you're looking for when you search your account.
     \- Showing you information most relevant to how you are or could be using the Evernote Service at a specific time or location.
     \- Suggesting actions for you to take based on information you've stored.
     \- Suggesting Evernote Service features or products to you that we think will help you get the most out of the Evernote Service.
     \- For Evernote Enterprise users, recommending people for you to collaborate with.
+    These activities are based on the contract we have with you (Article 6.1.b GDPR).
+- **Maintain and improve the Services.** To provide troubleshooting and customer support, the Customer Support team may need to access your personal data, such as your account email address and information about the Evernote application you are using, subject to the protections described below. We may also use your personal data to improve the Evernote Service such as debugging to identify and repair errors that impair existing intended functionality, conducting research for technological development and demonstration, and analyzing information to maintain or enhance the quality or safety of the Services. We will not use your Input or Output from an AI Feature (as defined in the [Supplemental Terms](https://evernote.com/legal/supplemental-terms)) to train our artificial intelligence models or tools unless you direct us to do so.
+The activities performed for customer support are based on the contract we have with you (Article 6.1.b GDPR). When you give customer support permission to access your Content, these activities are based on your consent (Article 6.1.a GDPR). The activities performed for troubleshooting, debugging, and service improvement are based on our legitimate interest to ensure the quality and the proper functioning of the services and improve the products (Article 6.1.f GDPR).
+    The activities we perform to provide the Services are based on the contract we have with you (Article 6.1.b GDPR). The activities performed to personalize the Services are based on our legitimate interest to improve and power your use of the Services (Article 6.1.f GDPR).
+- **Protect against security threats, abuse, and illegal activity.** As part of our efforts to protect your account and the functionality of the Evernote Service, our systems may analyze the emails you send to and from your Evernote account and the notes you share to detect spam, malware, or other potential security concerns. If we determine that such material constitutes a [Terms of Service](https://evernote.com/legal/terms-of-service) or [User Guidelines](https://evernote.com/legal/user-guidelines) violation, we may block delivery of or unshare the problematic material, much like a spam filter works for your email inbox.
+- **Maintain and improve the Services.** To provide troubleshooting and customer support, the Customer Support team may need to access your personal data, such as your account email address and information about the Evernote application you are using, subject to the protections described below. We may also use your personal data to improve the Evernote Service such as debugging to identify and repair errors that impair existing intended functionality, conducting research for technological development and demonstration, and analyzing information to maintain or enhance the quality or safety of the Services.
+These activities are based on our legitimate interest to ensure the quality and the safety of the services (Article 6.1.f GDPR).
+    The activities performed for customer support are based on the contract we have with you (Article 6.1.b GDPR). When you give customer support permission to access your Content, these activities are based on your consent (Article 6.1.a GDPR). The activities performed for troubleshooting, debugging, and service improvement are based on our legitimate interest to ensure the quality and the proper functioning of the services and improve the products (Article 6.1.f GDPR).
+[Learn more](https://evernote.com/security/tips) about steps you can take to protect your account, such as using strong passwords, two-step verification, and encryption.
+- **Protect against security threats, abuse, and illegal activity, and enforce our Terms, guidelines, and policies.** As part of our efforts to protect your account and the functionality of the Evernote Service, our systems may analyze the emails you send to and from your Evernote account and the notes you share to detect spam, malware, or other potential security concerns. If we determine that such material constitutes a [Terms of Service](https://evernote.com/legal/terms-of-service) or [User Guidelines](https://evernote.com/legal/user-guidelines) violation, we may block delivery of or unshare the problematic material, much like a spam filter works for your email inbox.
+    These activities are based on our legitimate interest to ensure the quality and the safety of the services (Article 6.1.f GDPR).
+    [Learn more](https://evernote.com/security/tips) about steps you can take to protect your account, such as using strong passwords, two-step verification, and encryption.
 - **Communicate with you.** We use your personal data to communicate with you in order to send important Service messages such as administrative messages, technical notices, or security alerts. If we learn of a security system breach, we may attempt to notify you and provide information on protective steps, if available, through the email address, phone number, or other contact information that you have provided to us or by posting a notice on the Evernote website and/or via other communication platforms. Depending on where you live, you may have a right to receive such notices in writing.
+This activity is based on the contract we have with you (Article 6.1.b GDPR).
+    This activity is based on the contract we have with you (Article 6.1.b GDPR).
+- **Comply with laws.** We also use information to satisfy applicable laws or regulations, including to demonstrate compliance, and disclose information in response to legal process or enforceable government requests, including to law enforcement. For more information, please visit the section "How do we respond to legal requests for my information?" of this Privacy Policy.
+- **Comply with laws.** We use information to satisfy applicable laws or regulations, including to demonstrate compliance, and disclose information in response to legal process or enforceable government requests, including to law enforcement. For more information, please visit the section "How do we respond to legal requests for your data?" of this Privacy Policy.
+When this activity is required by a specific legal obligation, your personal data may be used to the extent required to comply with the legal obligation itself (Article 6.1.c GDPR). When the applicable law leaves some discretion in assessing the appropriate way to comply with it, your personal data is used based on our legitimate interest to prove our compliance (Article 6.1.f GDPR).
+    When this activity is required by a specific legal obligation, your personal data may be used to the extent required to comply with the legal obligation itself (Article 6.1.c GDPR). When the applicable law leaves some discretion in assessing the appropriate way to comply with it, your personal data is used based on our legitimate interest to prove our compliance (Article 6.1.f GDPR).
+- **Market, promote, and maximize your engagement with the Services.** In accordance with your communication preferences, we may use your personal data to send you promotional communications that may be of specific interest to you, such as information about new products and features, tips for using the Evernote Service, special offers, and information about how Evernote works with products and services from our business partners. These communications are aimed at maximizing what you get out of the Evernote Service. You may unsubscribe from promotional communications at any time by following the instructions provided in emails. You may also log in to your [account settings](https://www.evernote.com/Settings.action) and go to Personal Settings to change your contact preferences. You can change your in-app notification preferences through your device settings. You will continue to receive essential Evernote Service-related and account-related information (such as notification that your paid subscription is about to expire), even if you unsubscribe from promotional emails or turn off in-app notifications. Evernote Enterprise users will also continue to receive a daily summary of activity associated with their Enterprise account. In addition, we may display ads about our Services, including on other companies' websites and applications, which may be informed by audits of interactions (like counting ad impressions), and we may also display ads that are more relevant to you. For more information about personalized ads, including how to opt-out, visit our [Cookie Notice](https://evernote.com/privacy/cookies).
+- **Market, promote, and maximize your engagement with the Services.** In accordance with your communication preferences, we may use your personal data to send you promotional communications that may be of specific interest to you, such as information about new products and features, tips for using the Evernote Service, special offers, and information about how Evernote works with products and services from our business partners. These communications are aimed at maximizing what you get out of the Evernote Service. You may unsubscribe from promotional communications at any time by following the instructions provided in emails. You may also log in to your [account settings](https://www.evernote.com/Settings.action) and go to Personal Settings to change your contact preferences. You can change your in-app notification preferences through your device settings. You will continue to receive essential Evernote Service-related and account-related information (such as notification that your paid subscription is about to expire), even if you unsubscribe from promotional emails or turn off in-app notifications. Evernote Enterprise users will also continue to receive a daily summary of activity associated with their Enterprise account.
+These activities are based on your consent (Article 6.1.a GDPR). However, when we use your email to send you information about products and services related to or similar to the Evernote service ("soft opt-in"), the legal basis is our legitimate interest (Article 6.1.f GDPR).
+    These activities are based on your consent (Article 6.1.a GDPR). However, when we use your email to send you information about products and services related to or similar to the Evernote Services ("soft opt-in"), the legal basis is our legitimate interest (Article 6.1.f GDPR).
+- **Protect our interests and rights.** We use information where required by law or where we believe it is necessary to establish, exercise, or defend our rights and those of our employees, or to carry out corporate transactions or operations. For example, in the event of a merger, sale, or reorganization of all or part of our business, personal data covered by this policy may be transferred in connection with that deal.
+- **Serve and measure the effectiveness of advertisements on both our Services and third-party services.** We may display ads about our Services, including on other companies' websites and applications (such as social media platforms), and measure them to understand their effectiveness. We may also display ads that are more relevant to you. In case of non-personalized ads, we use very limited information to serve you the ads, such as your approximate location (typically country) and your browser language.
+This activity is based on our legitimate interest to establish, exercise, or defend our rights, and to carry out corporate transactions or operations (Article 6.1.f GDPR).
+    When offering personalized ads, this activity is based on your consent (Article 6.1.a GDPR). When offering non-personalized ads, the activity is based on our legitimate interests to offer a free version of our Services (Article 6.1.f GDPR).
+We'll ask for your consent before using your personal data for a purpose not described in this Privacy Policy.
+- **Protect our interests and rights.** We use information where required by law or where we believe it is necessary to establish, exercise, or defend our rights and those of our employees, or to carry out corporate transactions or operations. For example, in the event of a merger, sale, or reorganization of all or part of our business, personal data covered by this policy may be transferred in connection with that deal.
+    This activity is based on our legitimate interest to establish, exercise, or defend our rights, and to carry out corporate transactions or operations (Article 6.1.f GDPR).
 **Would someone at Evernote ever view your Content?**
 You have control over who sees your Content. We limit the use of your Content to make sure that no one at Evernote can view it unless you expressly give us permission or it's necessary to comply with our legal obligations. Specifically:
 - To help refine or improve the technology, we may ask you for permission to review portions of your Content. For example, if a new feature suggests related notes that are relevant to your Content, we may give you an opportunity to provide us feedback on how well the feature is performing along with a sample of the Content in question, so we can make sure this feature provides appropriately tailored suggestions. Such access to your Content is done only with your express permission and is subject to strict confidentiality rules and data access controls. Choosing to give us such permission is completely voluntary.
 - If you contact our Customer Support team for help with specific pieces of Content in your account (for example, if you can't find a note you believe should be in your account), we may ask for your temporary permission to look at your Content. This permission terminates when the issue is resolved. If you send Evernote a help request and choose to attach application activity logs, please note that such logs may contain Content (for example, the title of a note or notebook). You may edit Content out of your activity logs before you send them to us.
 This policy is not intended to apply to our use of aggregated, de-identified, or anonymized data.
 ## How do we disclose your data?
 We are not in the business of selling or renting your personal data. Here are instances when we may disclose your personal data - and then only the minimum information necessary:
+- We disclose your personal data with our service providers who process data on our behalf, such as credit card processors and customer management systems. We require these providers to agree to strict data protection requirements in keeping with our privacy policy standards and our obligations under applicable privacy laws. We do not share your personal data with any third parties for their own advertising purposes. For example, our service providers help us:
+- We disclose your personal data with our service providers who process data on our behalf, such as credit card processors, transcription providers, and customer management systems. We require these providers to agree to strict data protection requirements in keeping with our privacy policy standards and our obligations under applicable privacy laws. For example, our service providers help us:
     \- Operate, develop, and improve the features and functionality of the Evernote Service.
     \- Complete your payment transactions.
     \- Fulfill your sales and support requests.
     \- Communicate with you as described elsewhere in this Privacy Policy.
 - If you purchase a Paid Service from a reseller, we may need to disclose limited personal data with the reseller to ensure accuracy in payment, account management, and delivery of services to you.
 - Your Content is private unless you decide you want to share it. You may choose to share using public links or through any of the Evernote Service's features that allow you to share or collaborate on Content ("Collaboration Features"). We may need to take steps to facilitate your collaboration. There are features in the Evernote Service that allow you to publish and share some of your notes and notebooks publicly, but these are optional. Any information that you post in these locations, or in the user forum, can be read, collected, and used by anyone and could enable others to send you unsolicited messages. You determine whether to post personal or otherwise sensitive information to publicly accessible areas of the Evernote site, so you should carefully consider how you use the Service. We are not responsible for any publication or use of any information you choose to post in these locations.
     \- When you use Collaboration Features, people you share with may see your user profile. If you have not added any profile information, then you will be identified by the email address associated with your Evernote Service account. If you are an Evernote Enterprise user, other members of your Evernote Enterprise account will see your full Evernote Enterprise account profile. Evernote Service users who are not in your Evernote Enterprise account will only see your profile name and image.
     \- In addition, when you use Collaboration Features, the information you share is no longer private to you. For example, by publishing or sharing any portion of your Content, you may be enabling each recipient of the shared material to access, use, display, perform, distribute, and modify that material.
     \- Depending on the permission levels you set when sharing Content, anyone who has access to the shared material may be able to see the Content, information about where and when the Content was created, as well as the history, tags, and reminders associated with the Content.
+    \- You can use a variety of third-party services and applications that interact with the Evernote Service, and you should review the access rights you provide to those services or applications, as you may enable them to access or extract your Content through your agreements with those parties.
 - In the event of a merger, sale, or reorganization of all or part of our business, personal data covered by this policy may be transferred in connection with that deal.
+- We may disclose personal data covered by this policy with our parents, subsidiaries, and affiliated companies.
+- We also may disclose personal data about you to third parties whenever you consent to or direct such sharing. This includes, for example, to show you personalized advertising or if you connect your Evernote account with a third-party app in the App Center. We work with a number of third-party applications and services. In some cases, we will partner with another company to provide an integration. If you connect your Evernote account to these third-party services, you may be giving the partner access to some or all of your data, including, in some cases, your Content. Providing such access is entirely voluntary, and you'll receive notice and must agree to such access before it is granted. Please consider your selection of such applications and services, and your permissions, carefully. We encourage you to review each party's contract terms and privacy policy.
+- We may disclose personal data covered by this policy with our Affiliates.
+- We may disclose personal data about you to third parties in connection with our own personalized advertising, in accordance with applicable law and your privacy choices. For more information, please visit the section "How do we use cookies and similar technologies?" of this Privacy Policy.
+- We work with a number of third-party applications and services, including third-party apps in the App Center or third-party AI services. If you connect your Evernote account to these third-party services, you may be giving them access to some or all of your data, including, in some cases, your Content. Third-party services you connect to your Evernote account will process your data under their own terms of service and privacy policies. Providing such access is entirely voluntary, and you'll receive notice and must agree to such access before it is granted. We encourage you to review the access rights you provide as well as each party's contract terms and privacy policy.
 **How do we respond to legal requests for your data?**
+We vigilantly protect the privacy of your account. We will not disclose your personal data to law enforcement or other governmental authorities unless we believe it is required to comply with warrants, court orders, subpoenas, or other lawful government requests. This may include responding to legal requests from jurisdictions outside of Italy where we have a good faith belief that the response is required by law in that jurisdiction, affects users in that jurisdiction, and is consistent with internationally recognized standards of due process.
+We vigilantly protect the privacy of your account. We will not disclose your personal data to law enforcement or other governmental authorities unless we believe it is legally required, or we have a good faith belief that disclosure is necessary to protect the rights, property, or safety of our users or others.
+We narrowly interpret all information requests, and we only disclose Content in your account that is specifically responsive to a government warrant or where you have provided your explicit consent. In accordance with our [Information for Law Enforcement Authorities page](https://evernote.com/legal/law-enforcement), we will notify you if we believe we are compelled to comply with a third party's legal demand for your information, and we routinely push back on government orders to delay user notice that we view as overly broad.
+Legal requirements may include warrants, court orders, subpoenas, or other lawful government requests, including from jurisdictions outside of Italy where we have determined that the response is required by law.
+In addition, in rare cases, we may share your personal data as necessary to investigate or take action regarding illegal activities, suspected fraud, or potential threats against persons, property or the systems on which we operate the Evernote Service, or as otherwise necessary to comply with our legal obligations.
+In rare cases, we may access, preserve or share your personal data, not including your Content, where we have a good faith belief that it is necessary to:
+- protect the rights, property, and safety of our users or others, including to protect life or prevent imminent bodily harm; or
+- detect, investigate, prevent, or address illegal activities, suspected fraud, copyright infringement, or potential threats against persons, property or the systems on which we operate the Evernote Service.
+We narrowly interpret all information requests, and we only disclose Content in your account that is specifically responsive to a valid and legally binding order or where you have provided your explicit consent. In accordance with our [Information for Law Enforcement Authorities page](https://evernote.com/legal/law-enforcement), we will make a reasonable effort to notify you if we believe we are compelled to comply with a third party's legal demand for your information, and we routinely push back on government orders to delay user notice that we view as overly broad.
 ## **How can you manage the data we store?**
 In most cases, you can manage your information simply by logging into your account and editing your information directly within the Evernote Service. You can access your notes and notebooks from your Evernote account and export them at any time, as explained [here](https://help.evernote.com/hc/en-us/articles/209005557-How-to-back-up-export-and-restore-import-notes-and-notebooks).
 If you prefer, you can contact us using our [web form](https://privacy.bendingspoons.com/topic/evernote) to ask us to provide access to, correct, update, or delete your personal data. Residents of certain regions may have additional or different rights in your personal data. Please see our [Region-Specific](https://evernote.com/privacy/regional) section for more information.
+If you are an Evernote Enterprise Administrator with questions about privacy or data protection, you may contact us by logging into your Evernote account, opening the [Contact form](https://help.evernote.com/hc/en-us/requests/new), selecting Accounts and Subscriptions > Enterprise > I'd like to submit a privacy request, completing the required fields, and clicking Submit.
 **How long do we store your data?**
+We make the Content you store within the Evernote Service readily accessible to you, until you make the decision to delete it. If you delete your Content and then sync, it will no longer be accessible to you or others who may access the Evernote Service. The Evernote Service's back-up systems may retain residual copies of your deleted Content for up to one year due to the nature of those systems' operations.
+We make the Content you store within the Evernote Service readily accessible to you, until you make the decision to delete it. If you delete your Content and then sync, it will no longer be accessible to you or others who may access the Evernote Service. The Evernote Service's back-up systems may retain residual copies of your deleted Content and attachments for up to 60 days, due to the nature of those systems' operations.
 The Evernote Service provides you with features that allow you to communicate and collaborate with other users. Deleting your copy of these communications (such as messages) won't delete copies existing in the accounts of people with whom you were interacting.
+For users who are inactive for extended periods of time, we may close your account to satisfy our obligations under applicable law, and in accordance with our data retention policy. If that happens, we will try to notify you before taking any action.
+For users who are inactive for extended periods of time, we may close your account to satisfy our obligations under applicable law, and in accordance with our data retention policy. If that happens, we will make reasonable efforts to notify you before taking any action in accordance with our Terms of Service.
+Our retention of your personal data is based upon several factors, including the length of time necessary to fulfill the purposes outlined in this Privacy Policy, to make the Evernote Service available to you, to demonstrate that we have fulfilled our business and legal duties and obligations and contractual commitments, or as instructed by you, unless a longer period is required or permitted by law. For example, we retain personal data processed for customer support purposes or to provide the Evernote Service for a maximum of three (3) years from your most recent interaction with the Evernote Service, or from the expiration of your subscription, and we retain personal data processed for compliance with legal obligations for a maximum of five (5) years from your most recent interaction with the Evernote Service, or from the expiration of your subscription. If you access the Evernote Service after your subscription has expired, the retention period starts from this most recent interaction. Specific legal obligations might require different retention periods and, in such cases, those different periods will apply. Upon the expiry of the data retention period, the data is either deleted or anonymized.
+Our retention of your personal data is based upon several factors, including the length of time necessary to fulfill the purposes outlined in this Privacy Policy, to make the Evernote Service available to you, to demonstrate that we have fulfilled our business and legal duties and obligations and contractual commitments, or as instructed by you, unless a longer period is required or permitted by law. For example, we retain personal data processed to provide the Evernote Service for a maximum of three (3) years from your most recent interaction with the Evernote Service, or from the expiration of your subscription, and we retain personal data processed for customer support purposes or for compliance with legal obligations for a maximum of five (5) years from your most recent interaction with the Evernote Service, or from the expiration of your subscription. If you access the Evernote Service after your subscription has expired, the retention period starts from this most recent interaction. Specific legal obligations might require different retention periods, and, in such cases, those different periods will apply. Upon the expiry of the data retention period, the data is either deleted or anonymized.
 **What happens if you want to stop using the Evernote Service?**
 As described above, you can delete your Content at any time, and you can stop using the Evernote Service at any time. You may also export your notes at any time, as explained [here](https://help.evernote.com/hc/articles/209005557).
 **What happens if we close your account?**
 Data privacy laws or regulations in your home country may differ from, or be more protective than, those in the United States. We will collect, store, and use your personal data in accordance with this Privacy Policy and applicable privacy laws, wherever it is processed.
 ## **Other information**
 **Are children allowed to use the Evernote Service?**
+The Evernote Service is designed for adults; we do not intend to collect personal data from children under the age of 16. If we learn we have collected personal data from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us using our [web form](https://privacy.bendingspoons.com/topic/evernote).
+The Evernote Service is designed for adults; we do not intend to collect personal data from children under the age of 18. If we learn we have collected personal data from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us using our [web form](https://privacy.bendingspoons.com/topic/evernote).
+**How do we respond to Do Not Track signals?**
+**How do we use cookies and similar technologies?**
+Do Not Track is a privacy preference that users can set in their web browsers. When a user turns on the Do Not Track signal, the browser sends a message to websites requesting them not to track the user. At this time, we do not currently respond to or otherwise take action in response to web browser "do not track" signals. For information about Do Not Track, visit [www.allaboutdnt.org](http://www.allaboutdnt.org/).
+When we use the word "cookies" in this Privacy Policy, we mean any tracking technology that stores or accesses information on the user's device, including any SDK, tracking pixel, and HTML5 local storage.
+**If you are located in the EEA, the UK, or other jurisdictions where prior consent is required**, we will ask for your consent before using tracking technologies that are non-essential and not otherwise exempt from the consent requirement, including cookies where applicable. You can provide, refuse, or withdraw your consent at any time through our cookie banner, or through our cookie preference center, which is accessible at any time by selecting the Your Privacy Choices link at the bottom of any page on our website.
+When you withdraw your consent, the relevant tracking technologies will no longer collect data from that point onward. However, we may continue processing data collected before the withdrawal, as permitted by applicable law.
+Where permitted by applicable law, we treat certain first-party analytics technologies as technical trackers that do not require consent. You can still opt out of further processing of the data that's been collected via these trackers at any time by contacting us.
+**If you are located in the United States or other jurisdictions where prior express consent is not required**, you can opt -out at any time by selecting the Your Privacy Choices link at the bottom of any page on our website. There, you can enable or disable the sharing or sale of your personal data, as defined under applicable law.
+**How do we respond to browser-based privacy signals?**
+We honor legally recognized browser-based opt -out preference signals, including the Global Privacy Control (GPC). If you have enabled GPC in your browser, we will treat it as a valid request to opt out of the sale or sharing of your personal information for targeted advertising purposes, to the extent required by applicable law. You will need to enable GPC separately for each browser you use. To learn more about GPC and how to enable it, visit [globalprivacycontrol.org](https://globalprivacycontrol.org/).
+**What data is processed when you use an Evernote AI Feature?**
+When you choose to use a feature of the Evernote Service that incorporates artificial intelligence models or tools (an "**AI Feature**"), we process the text, images, and other data you submit, upload, record or dictate ("Input") to generate the result you request ("Output"). Depending on the AI Feature, we may use third-party AI model providers to process your Input and Output on our behalf. We require those providers to agree to strict data protection requirements consistent with this Privacy Policy and applicable law. You can manage or disable Evernote AI Features at any time in your account settings.
+We do not use your Input or Output to train our artificial intelligence models or tools, or those of third-party AI model providers. For more information about your rights in relation to AI Features, including ownership of Output and applicable terms of use, see our [Terms of Service](https://evernote.com/legal/terms-of-service).
+Third-party AI services, for example Claude or ChatGPT, that you choose to connect to your Evernote account, are separate from the AI Features described above and do not act as Evernote service providers. Their own terms of service and privacy policies govern how they process your data, and Evernote does not control that processing. See "How do we disclose your data?" for more information.