Legal

Privacy Policy

Last update: 23 July 2026

Introduction

DEXI (“we”, “our”, “us”) operates the Dexi note-taking service: the website at https://dexi.net, the application at https://app.dexi.net, and the Save to Dexi browser extension (together, the “Service”). This policy explains what data we collect, why, and what rights you have over it.

The short version: we collect what's needed to run a notes product — your account details and the content you choose to save — plus anonymous usage statistics via Google Analytics. We don't run ads, and we never sell your data.

Data We Collect

Account data. Your email address, name, and a hashed password (we never store the password itself). If you sign in with Google, we receive your Google account email and identifier; the sign-in tokens Google issues are stored encrypted. You may optionally upload an avatar image.

Your content. The notes, tags, and bookmarks you create; the pages you save (address, title, and any text you select); the RSS feeds you subscribe to and the entries fetched from them; and emails you choose to forward to your personal save-to-Dexi address, which become notes in your account. To power search and “related content”, we compute numerical representations (embeddings) of your notes on our own servers — your content is not sent to any third-party AI service.

Session and security data. When you sign in we record the session's IP address and browser type so you can review and revoke your active devices in Settings. Server logs used to operate and secure the Service may also include IP addresses and request metadata, retained briefly.

Usage data. We use Google Analytics on the website and the application to understand how the Service is used — pages visited, approximate location, browser and device type. This tells us things like which features are used and where visitors come from. Google Analytics does not receive your notes, bookmarks, or any other content, and we don't use it for advertising. Google's privacy policy: https://policies.google.com/privacy. You can opt out with Google's browser add-on at https://tools.google.com/dlpage/gaoptout, or by blocking analytics cookies in your browser — the Service works fully without them.

Cookies. We use one strictly necessary cookie — an httpOnly session token that keeps you signed in — plus Google Analytics cookies, which distinguish visitors so usage statistics aren't double-counted. There are no advertising cookies.

The Browser Extension

The Save to Dexi extension acts only when you invoke it — by clicking its button, using its keyboard shortcut, or choosing “Save to Dexi” from the right-click menu. At that moment it reads the current page's address, title, and any text you have selected, and opens a Dexi window so you can review and save them as a note in your account. It does not read your browsing history, does not monitor pages you visit, and collects nothing in the background.

Data handled by the extension is used solely to provide this user-requested feature: creating and updating your notes. It is never used for advertising, never used to build profiles unrelated to the feature, never sold, and never shared with third parties except the hosting providers that run the Service (listed below). This complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. The same applies to our bookmarklet and any sharing shortcuts you set up.

How We Use Data

  1. to provide, maintain, and secure the Service;
  2. to send service emails: verification, password reset, and — if you set them up — scheduled digests of your own notes and feed-sharing invitations you initiate;
  3. to provide support when you contact us;
  4. to understand how the Service is used so we can improve it;
  5. to detect, prevent, and address technical or security issues.

We do not send marketing email, and we do not use your content or account data for advertising or profiling.

Sharing and Disclosure

Your notes and content are private to your account. Content becomes visible to others only when you explicitly share it — for example by publishing a feed or sending a feed invitation. Beyond that, we disclose data only:

  1. to the infrastructure providers that run the Service (below), solely so they can provide it;
  2. if required by law or a valid request by public authorities;
  3. as part of a merger, acquisition, or asset sale, in which case this policy continues to apply to your data;
  4. where necessary to protect the rights, property, or safety of Dexi or its users.

Service Providers

We use a small number of providers to operate the Service, each processing data only on our behalf:

Railway (railway.com) hosts our application, database, and file storage.

Resend (resend.com) delivers our service emails and receives emails you send to your save-to-Dexi address.

Google provides optional sign-in with Google (only if you choose to use it) and Google Analytics, our usage-statistics service (see “Usage data” above). Their privacy policy: https://policies.google.com/privacy

Data is hosted in the United States. If you use the Service from elsewhere, you consent to your data being transferred to and processed there.

Retention and Deletion

We keep your data for as long as your account exists. You can export all of your content at any time from Settings, and you can delete your account from Settings — deletion removes your account and all of your content from our systems. Backups containing deleted data expire on a rolling basis. We may retain minimal records where required by law.

Your Rights

Wherever you live, and specifically under the GDPR (EU/EEA) and the CCPA (California), you have the right to access, correct, export, restrict, or delete your personal data, and to withdraw consent where processing is based on it. Most of this you can do yourself in the app (edit your profile, export your data, delete your account); for anything else, email us at team@dexi.net and we'll respond promptly. We may ask you to verify your identity first. EU/EEA residents also have the right to complain to their local data protection authority. We do not sell personal information, so there is nothing to opt out of under the CCPA.

Security

Passwords are stored using modern one-way hashing, sign-in tokens from Google are encrypted at rest, and all traffic to the Service is encrypted in transit (HTTPS). No method of transmission or storage is 100% secure, but we work to protect your data with commercially reasonable safeguards.

Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. We'll post changes on this page and update the date at the top; for material changes we'll notify you by email or a prominent notice in the app before they take effect.

Contact Us

Questions about this policy or your data: team@dexi.net. For general help, see dexi.net/support.