Governing personal, non-commercial use of Notion's productivity tools
Overall Score
Risk by Category
Notion's Personal Use Terms of Service (effective as of the linked page) establish the legal framework for individuals using Notion for non-commercial purposes. Key areas include granting Notion a worldwide license to host, display, and improve services using User Content; prohibitions on illegal use, spam, and security interference; account termination rights; limitation of liability; indemnity; governing law (California); and references to separate Privacy Policy and Cookie Policy for data handling. The terms emphasize personal use only, with commercial use requiring a paid workspace plan. Data practices are deferred to privacy policy, but TOS grants broad rights over user-generated content for service operation.
Users grant Notion a perpetual, worldwide, royalty-free license to use, modify, and distribute content for service provision and improvement.
Notion does not claim ownership of content but requires license for functionality.
Disputes governed by California law, potentially unfavorable for international users.
Generous free tier for personal productivity without commercial restrictions.
Users can export data at any time.
Explicit guidelines prevent abuse while allowing flexible personal use.
Spotify collects the following categories of personal data. High Risk categories are used for advertising profiling or involve sensitive personal information.
Email, name, password hash for authentication.
Page views, interactions for analytics.
All user-entered text, files, databases.
Your data serves the following purposes. Mandatory purposes cannot be disabled without canceling the service. Opt-out available purposes allow some user control.
Content used to store, access, and display pages/databases across devices.
Aggregated data used to improve features; individual data per Privacy Policy.
Optional AI uses content for generation, with opt-out available.
Spotify shares data with several categories of third parties. Sharing with advertising partners is extensive and represents the primary commercial use of your behavioral data.
Shares with hosting, analytics (e.g., Amplitude), payment processors under contract.
No ad networks; personal use not sold for ads.
Shared within Notion entities for operations.
Disclosed if required by law.
The following rights may be available to you depending on your region. EU/EEA users have the broadest protections under GDPR. Non-EU users have more limited guarantees.
Users can terminate account anytime; Notion can suspend for violations.
Export workspaces in Markdown, CSV, PDF formats.
Delete pages; full account deletion removes personal data post-retention.
Data is retained for different periods depending on category, and security disclosures vary in depth. The policy highlights the following retention and transparency points.
Retention Periods
Data deleted within 30 days of account closure, except backups.
Logs retained for legal/compliance up to 7 years.
Retained indefinitely in aggregated form.
Security & Transparency
Data encrypted in transit (TLS) and at rest.
Notify users as required by law.
SOC 2 compliant; regular audits.
Role-based permissions in workspaces.
Source Text
You retain ownership but grant Notion broad license to use Content.
Interpretation
Standard for SaaS; enables features like search/sync but allows Notion to use for ML training.
Source Text
Prohibits illegal, harmful use; personal only.
Interpretation
Protects platform integrity; clear for users.
Source Text
Caps liability to fees paid; no consequential damages.
Interpretation
Common but user-unfriendly; review insurance.
Source Text
Notion may terminate for violations.
Interpretation
Balanced with user right to delete.
Source Text
Exclusive jurisdiction in CA courts.
Interpretation
May disadvantage non-US users.
No, personal use only. Upgrade to a paid Workspace plan for teams or business.