Notion's Privacy Policy describes what personal data the company collects from users, how it is used, with whom it is shared, and what rights users have regarding their data.
This analysis describes what Notion's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The Privacy Policy is the primary document through which Notion discloses its data collection and processing practices, and it is the basis on which users can exercise data rights including access, deletion, and opt-out under GDPR and CCPA.
Interpretive note: The full text of the Privacy Policy is not reproduced in this index document; all characterizations are inferred from the document's structure and standard industry practice. Specific data categories, sharing arrangements, and user rights mechanisms require review of the linked Privacy Policy.
Unified Privacy Policy replaces fragmented California-specific notice and suggests consolidated privacy governance across jurisdictions.
View full change record →All Notion users are subject to the Privacy Policy, which governs collection and processing of personal data including account information, usage data, and content data stored in workspaces. Users in the EU, UK, and California have specific rights under GDPR and CCPA respectively that are typically addressed in the Privacy Policy, and they can exercise those rights by contacting Notion through mechanisms described in that document.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
Glassdoor does not discriminate against any user for exercising their privacy rights.
We will not discriminate against you if you decide to exercise these rights.
(1) REGULATORY LANDSCAPE: The Privacy Policy engages GDPR and UK GDPR for EU and UK users, CCPA and CPRA for California residents, and general FTC Act requirements for US users.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The Privacy Policy is the primary document through which Notion discloses its data collection and processing practices, and it is the basis on which users can exercise data rights including access, deletion, and opt-out under GDPR and CCPA.
All Notion users are subject to the Privacy Policy, which governs collection and processing of personal data including account information, usage data, and content data stored in workspaces. Users in the EU, UK, and California have specific rights under GDPR and CCPA respectively that are typically addressed in the Privacy Policy, and they can exercise those rights by contacting Notion …
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Notion.