Data we collect
We collect account details, workspace configuration, billing status, authentication records, connected Notion metadata, widget settings, support requests, and analytics events needed to operate the service.
How we use data
Data is used to provide dashboards, reports, authentication, billing, support, abuse prevention, security monitoring, product improvement, and service communications.
Visitor analytics
Tracked visitor events may include page identifiers, timestamps, anonymous visitor/session IDs, referrer, country/region/city from hosting headers, device type, browser, engagement events, and minimized metadata.
Processors
Supabase, Stripe, Resend, Upstash, Cloudflare, AI providers, and observability vendors process limited data for hosting, auth, billing, email, rate limiting, analytics, and reliability.
Retention and deletion
Retention follows plan limits, workspace settings, legal requirements, and operational needs. Workspace owners can request export or deletion of account and workspace data.
Security
We use access controls, row-level security, scoped credentials, webhook signing, rate limits, audit trails, and secret handling to protect customer data.
Your rights
How Notion Analytics collects, uses, protects, retains, and deletes account, workspace, billing, and visitor analytics data.
Last updated
This Privacy Policy was last updated on May 30, 2026.
Controller and contact
Notion Analytics operates this service. Privacy, deletion, export, and security questions can be sent through the contact and support channels on this website.
Notion data
We store connection metadata and page identifiers needed to track selected pages. We do not need to expose private Notion page content to visitors to provide analytics dashboards.
Visitor identifiers
Visitor analytics use anonymous visitor and session identifiers for reporting. IP-derived location may be provided by infrastructure headers and is used for country, region, and city reporting.
International processing
Data may be processed by infrastructure and service providers in multiple regions where required to run authentication, databases, billing, email, hosting, and monitoring.
Children
The service is intended for business and professional use and is not directed to children.