Back to Onyx Notes

Trust

Version 3. Effective October 10, 2026.

This page is the one place every trust claim in Onyx points to. If the app says it, this page explains it, and the Privacy Policy makes it binding.

Audio is never stored

Your microphone's audio goes from your browser to our server and straight on to our transcription provider, which turns it into text as it arrives. We do not write audio to disk, to a database or to a backup. When the recording ends there is no audio file anywhere in Onyx. What exists afterwards is the transcript and the notes, in your account.

Never used to train AI

  • We do not train models. We have no model to train.
  • Our transcription provider, Deepgram, is opted out of its model improvement program on every stream we send, so your audio is not kept to improve their models.
  • Our AI provider, Anthropic, does not use what we send through its API to train its models, under its commercial terms.
  • If either of those facts changes, we change providers or change this page before the change takes effect, and we tell you.

What is stored, and for how long

  • Account (name, school, email, hashed password). Where: our database, United States. How long: while your account exists.
  • Transcripts, notes, study guides, My notes. Where: our database. How long: while the lecture exists; deleted lectures are purged after 30 days (lectures deleted before October 8, 2026 are kept until November 7, 2026).
  • Audio. Where: nowhere. How long: never stored.
  • Shares. Where: our database. How long: while the share exists.
  • Usage records (tokens and cost per AI request). Where: our database. How long: 24 months.
  • Product usage events (seven in-app counts, no content). Where: our database. How long: 24 months.
  • Slack settings (encrypted webhook address, your choices, send version and time). Where: our database. How long: until you remove the webhook or delete your account.

Account deletion is in the account menu. We sign you out everywhere at once, wait at least 14 days in case you change your mind (you can cancel until deletion begins), then delete everything. Export is next to it and gives you one file with everything.

Who sees your lecture

You. Nobody at Onyx reads lectures to run the service. If we ever need to look at a specific lecture to fix a problem you reported, we ask you first and read only what you point us to. Sharing sends a copy to one person you name, who must have a confirmed email; there are no public links. We hand over data to a third party only under a valid legal demand, and we tell you when the law allows. What you export or send leaves Onyx under your control; the destination's rules apply.

Sending to Slack

Automatic sending posts to your Slack channel every time a lecture or call in that class ends, until you turn it off. Each message starts with a short block of plain fields (lecture id, date, version) so tools that read your channel can file it; it contains nothing the message does not already show. The webhook address you paste is stored encrypted and is never shown again in full. Your My notes are included only if you turn that on. Lectures shared with you never post automatically.

The AI can be wrong

Notes are written by an AI model from the transcript, a few hundred words at a time, while the lecture is happening. They are good and they are not perfect: a note can leave something out, state a number wrongly, or describe a method the lecturer did not use. The transcript is the record. The study guide links every claim back to the notes so you can check it, and you can edit both. We measure error rates on a sample of lectures and will publish them here.

Recording is your call

Onyx records only when you press Start and never stores the audio. You are responsible for recording where you are allowed to and for telling people. The recording notice explains the rules that commonly apply.

Cookies

Two, both needed to sign you in and keep your account safe: onyx_session and onyx_dev. No third-party analytics, advertising or tracking scripts, no third-party cookies, no tracking across sites. We do count seven things you do in the app (such as opening a study guide), in our own database, with your account id, the lecture's id, the time and a short label (such as which app layout), and no lecture content; they are kept 24 months. Details in the Privacy Policy.

Accessibility

We build to WCAG 2.2 AA: keyboard operation, visible focus, screen reader labels, AA contrast in both themes, reduced-motion support and 44-pixel targets on phones. If something does not work for you, email onyxnotessupport@gmail.com and we will fix it or give you another way to do it.

Security, briefly

Passwords are hashed with scrypt. Sessions are random tokens, stored hashed. Everything is encrypted in transit. Your browser never talks to our database or to a provider; only our server does, and it holds the keys. Sign-up, sign-in and password reset are rate-limited. Report a security issue to onyxnotessupport@gmail.com and we will acknowledge it within two business days.

Who we are

Angel Valle, Nashville, Tennessee, onyxnotessupport@gmail.com. Read the Privacy Policy, the Terms of Service and the recording notice.