[dev] Privacy bug leads to internal notes being sent to customers. Confirmation?