Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
The policy notes that the English version will govern in case of conflicts with translations. For Enterprise accounts, the Account Holder (e.g., employer) may control user data. Customer Support might access personal data for troubleshooting. Systems automatically analyze content for security and policy enforcement, potentially blocking problematic material. Shared content loses its private status, and connecting third-party services can give them broad data access under their own policies. Data submitted to AI features may be processed by third-party providers. User data is replicated and hosted on servers in the United States, meaning US privacy laws apply. The Web Clipper also records source information regardless of browser do-not-track settings. However, the service does not intentionally collect data from children under 18 and deletes it if found without consent. It also provides clear consent mechanisms for non-essential tracking technologies and honors Global Privacy Control (GPC) signals.
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
5 findings
Key problematic clauses that pose a risk to the user.
medium90% confidence
Employer/Organization Control Over Enterprise Account Data
For End Users of an Evernote Enterprise account, the Account Holder (e.g., employer or organization) may have established its own rules regarding access, use, disclosure, or retention of data stored in that account.
Why it matters: If you are an End User of an Evernote Enterprise account, your employer or organization may have control over your data within that account, potentially influencing how your data is accessed, used, disclosed, or retained, independently of your personal preferences.
If you are an End User of an Evernote Enterprise account, please note that the Account Holder of your Evernote Enterprise account (such as your employer or organization) may have established its own rules regarding End Users’ access, use, disclosure, or retention of data stored in that account.
Return to Privacy Center, paragraph 2 · Citation strength: strong
medium85% confidence
System Analysis of Content for Security and Policy Enforcement
Evernote's systems may analyze emails sent to and from your account and notes you share to detect spam, malware, or other security concerns, and may block or unshare material determined to be a violation of Terms of Service or User Guidelines.
Why it matters: Your emails and shared notes may be automatically analyzed, and material deemed problematic could be blocked or unshared without your direct intervention, impacting your communication and sharing capabilities.
As part of our efforts to protect your account and the functionality of the Evernote Service, our systems may analyze the emails you send to and from your Evernote account and the notes you share to detect spam, malware, or other potential security concerns. If we determine that such material constitutes a Terms of Service or User Guidelines violation, we may block delivery of or unshare the problematic material, much like a spam filter works for your email inbox.
Information we derive, paragraph 5 · Citation strength: strong
medium90% confidence
Content Becomes Non-Private When Shared
When you use Collaboration Features, the information you share is no longer private, and recipients may access, use, display, perform, distribute, and modify the shared material.
Why it matters: Once you share content using Collaboration Features, it loses its private status, and anyone with whom you share it may be able to widely use, modify, and distribute it, potentially beyond your control.
In addition, when you use Collaboration Features, the information you share is no longer private to you. For example, by publishing or sharing any portion of your Content, you may be enabling each recipient of the shared material to access, use, display, perform, distribute, and modify that material.
Information we derive, paragraph 24 · Citation strength: strong
medium90% confidence
Transfer of Data to the United States for Hosting
When you sync your computing device with the Evernote Service, data stored locally on your device will be replicated on servers maintained in the United States.
Why it matters: Your personal data will be transferred to and hosted in the United States, meaning it will be subject to US data privacy laws, which may differ from or be less protective than those in your home country.
When you sync your computing device with the Evernote Service, that data will be replicated on servers maintained in the United States. This means that if you store information in or submit data to the Evernote website or Evernote Software and sync such Evernote Software with the Evernote Service, you acknowledge your personal data will be transmitted to, hosted, and accessed in the United States. Data privacy laws or regulations in your home country may differ from, or be more protective than, those in the United States.
Information we derive, paragraph 30 · Citation strength: strong
low85% confidence
Web Clipper Ignores Do-Not-Track Settings
The source-recording functionality of the Web Clipper browser extension or "Save to Evernote" button will not be affected by your browser's do-not-track settings.
Why it matters: The Web Clipper feature will still record the source of clipped material even if you have enabled 'do-not-track' in your browser, potentially overriding your privacy preferences for website tracking.
This source-recording functionality will not be affected by your browser’s do-not-track settings.
Your payment information, if you purchase a subscription, paragraph 8 · Citation strength: strong
Data Use
Not clearly stated
How the company collects, processes, and shares your data.
?
Not clearly stated
No cited data-use findings — wording is unclear
The policy mentions that Evernote is not in the business of selling or renting personal data, but it does not explicitly state that it will never sell or rent personal data. The policy also mentions that user Input or Output is not used to train their AI models or tools, or those of third-party AI model providers, but does not explicitly state that it will never use user data to train AI models.
Cancellation and Renewal
Not clearly stated
Information on how to cancel services or subscriptions and how renewals are handled.
?
Not clearly stated
No cited billing terms — wording is unclear
The policy does not clearly state how subscriptions renew or how to cancel them. It mentions that you will continue to receive essential service-related information, such as notification that your paid subscription is about to expire, but does not provide details on the renewal process itself. It also states you can delete content and stop using the service at any time, but does not explicitly cover subscription cancellation or auto-renewal terms.
Gotchas
Not clearly stated
Unexpected or subtle clauses that might disadvantage the user.
?
Not clearly stated
No cited gotchas — wording is unclear
The policy states that if you activate AI features, third-party AI services that you connect to your account (like Claude or ChatGPT) are separate from Evernote's AI features and their own terms of service and privacy policies will govern how they process your data, with Evernote not controlling that processing. This means users must review additional policies for these external AI tools. It is not explicitly stated how or if these third-party AI services might utilize your data, such as for training purposes, and users would need to refer to the individual third-party policies. The policy also notes that deleting your copy of communications (like messages) won't delete copies existing in the accounts of people with whom you were interacting. This could lead to a 'gotcha' for users who expect deletion to be comprehensive across all parties.
Protections
3 findings
Safeguards and rights benefiting the user.
Protection95% confidence
No Intentional Collection of Children's Personal Data
The Evernote Service is designed for adults, and there is no intent to collect personal data from children under the age of 18. If such data is collected without parental consent, it will be deleted.
Why it helps: This clause helps protect children's privacy by explicitly stating that the service is not intended for them and committing to delete any collected data from minors without proper consent.
The Evernote Service is designed for adults; we do not intend to collect personal data from children under the age of 18. If we learn we have collected personal data from a child under 18 without verification of parental consent, we will delete that information.
Other information, paragraph 1 · Citation strength: strong
Protection90% confidence
Clear Consent Required for Non-Essential Tracking Technologies
For users in the EEA, UK, or other jurisdictions requiring prior consent, the service will ask for consent before using non-essential tracking technologies, and consent can be provided, refused, or withdrawn at any time.
Why it helps: This provides users with control over non-essential tracking technologies, ensuring their consent is explicitly obtained and allowing them to manage their privacy preferences.
If you are located in the EEA, the UK, or other jurisdictions where prior consent is required , we will ask for your consent before using tracking technologies that are non-essential and not otherwise exempt from the consent requirement, including cookies where applicable. You can provide, refuse, or withdraw your consent at any time through our cookie banner, or through our cookie preference center, which is accessible at any time by selecting the Your Privacy Choices link at the bottom of any page on our website. When you withdraw your consent, the relevant tracking technologies will no longer collect data from that point onward.
Other information, paragraph 1 · Citation strength: strong
Protection90% confidence
Honors Global Privacy Control (GPC) Signals
The service honors legally recognized browser-based opt-out preference signals, including the Global Privacy Control (GPC), and will treat it as a valid request to opt out of the sale or sharing of personal information for targeted advertising purposes.
Why it helps: This enables users to automatically signal their privacy preferences through their browser, providing an easy way to opt out of data sharing for targeted advertising without needing to configure settings on each website.
We honor legally recognized browser-based opt -out preference signals, including the Global Privacy Control (GPC). If you have enabled GPC in your browser, we will treat it as a valid request to opt out of the sale or sharing of your personal information for targeted advertising purposes, to the extent required by applicable law. You will need to enable GPC separately for each browser you use. To learn more about GPC and how to enable it, visit globalprivacycontrol.org .
Other information, paragraph 1 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.