"Notion operates with high-risk privacy practices comparable to advertising-supported platforms (Netflix/Spotify tier: 40-50, but significantly higher due to more aggressive tracking and sharing). The service collects 40+ data types including sensitive personal information (location, contacts, email content, calendar data), shares these with advertising networks for behavioral profiling, and deploys cross-device tracking pixels across the internet. Policy changes are implemented unilaterally, and data retention is indefinite with vague justifications for 'legitimate business purposes.'"
Take Action
7 Privacy Improvements Available
notion Privacy Concerns & Scorecard
Notion collects an extensive array of personal data including sensitive information such as precise geolocation, contacts, email message content, calendar data, job application materials, and inferred consumer profiles. The collection scope spans 40+ distinct data types with cross-device tracking capabilities.
Notion shares user data with advertising networks, data enrichment providers, and ad servers. Data including identifiers, geolocation, and inferred profiles are explicitly sold or shared with advertising partners for behavioral targeting. Google APIs provide access to email content, contacts, and calendar information.
Notion deploys third-party tracking pixels and cookies across the internet for cross-site behavioral tracking and retargeting. Users can opt-out through third-party mechanisms (NAI, DAA) but Notion does not control these. Cross-device tracking matches browsing activity across multiple devices without granular user controls.
Data retention periods are vague and indefinite. Notion retains data 'as long as user uses the Services or as necessary' for multiple purposes including 'pursue legitimate business purposes' without specific time limits. No explicit data deletion mechanism is described.
Notion reserves the right to unilaterally change privacy policies with only continued use constituting acceptance. Account deletion does not guarantee deletion of all data. Opt-out mechanisms for advertising require using third-party tools outside Notion's control. Limited opt-out rights exist for sensitive personal information.
Data deletion request
- 1Prepare your request specifying which personal data you want deleted or accessed (e.g., account information, workspace content, or analytics data).
- 2Email Notion's privacy team at privacy@makenotion.com with your data subject request, including your account email address and details of the request.
- 3Await confirmation from Notion; they will process the request in accordance with applicable law (GDPR, CCPA, etc.).
Mobile location opt out
- 1On an iPhone or iPad, go to the iOS Settings app, scroll down to find Notion, tap it, then tap 'Location' and select 'Never'.
- 2On an Android device, go to Settings, then Apps, find and tap Notion, tap 'Permissions', then tap 'Location' and select 'Deny'.
Third party connection revocation
- 1Log in to your Notion account.
- 2Go to Settings, then navigate to 'Connections' or 'My connections'.
- 3Find the third-party integration you want to disconnect (e.g., Google Calendar, Gmail, Slack).
- 4Click 'Disconnect' or 'Remove' to revoke the connection.
- 5Additionally, review and revoke Notion's access in the third-party service's own settings (e.g., in your Google Account's connected apps page).
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, authentication, customer support, and recruitment
Payment processing, billing, fraud prevention, and transaction records
Service delivery, integration with calendar and email systems, and analytics
Service functionality, collaboration features, and contact synchronization
Security, fraud prevention, analytics, and targeted advertising
Service delivery, analytics, and location-targeted advertising
Service improvement, analytics, and targeted advertising
Cross-device tracking, advertising personalization, and analytics
B2B marketing, data enrichment, and targeted outreach
Targeted advertising, behavioral marketing, and cross-context profiling
Cross-Platform Tracking
Notion tracks your browsing activity across multiple devices (mobile, laptop, desktop) and across different websites and apps using cookies, pixels, and device identifiers. This cross-device tracking is used to match your behavior patterns and create unified advertising profiles. The service shares these tracking identifiers with third-party advertising technology partners who extend this tracking across the internet for behavioral targeting and retargeting purposes.
Tracking Methods:
Cookies and Tracking Pixels
Third-party advertising partners place cookies and pixel tags in the browser to collect information about user browsing behavior and serve relevant advertising across the internet
Device Identifiers and Fingerprinting
Browser details, operating system, IP address, MAC address, and device information are collected and matched across devices to create a unified cross-device browsing profile
Mobile Advertising Identifiers
Mobile advertising identifiers (IDFA, GAID) are collected from mobile apps and used by advertising partners for cross-app tracking and behavioral profiling
Third-Party Analytics
Multiple third-party analytics providers are embedded to track usage patterns, session behavior, and engagement metrics
Google API Integration
Authorization tokens are stored to access Gmail, Contacts, Calendar, and Workspace APIs, allowing Notion to read email content, contact lists, and calendar events
Automatic Collection Technologies
Automatic data collection technologies track user interactions for marketing purposes with limited Do Not Track (DNT) support
AI & Data Training
notion does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed notion
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.