Privacy Policy

Effective Date: November 25, 2025

Last Updated: November 25, 2025

1. Introduction

Welcome to Notion Health Check, an independent tool created by an indie developer ("we", "us", or "our"). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains how we collect, use, store, and share your information when you use our website and software-as-a-service application (collectively, the "Service").

By accessing or using our Service, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this policy.

IMPORTANT DISCLAIMER: Non-Affiliation with Notion
Notion Health Check is an independent third-party integration. We are not affiliated with, endorsed by, sponsored by, or in any way officially connected with Notion Labs, Inc. or any of its subsidiaries or affiliates.

2. Information We Collect

We collect information to provide our workspace analysis services. We categorize this data into three types: Account Data, Usage Data, and Notion Workspace Data.

A. Account Information

When you register for an account, we collect:

Email Address: Used for login and communication.
Password: Stored securely using industry-standard hashing (we cannot see your actual password).
Authentication Data: If you log in via third-party providers (like Google or GitHub), we collect your email and basic profile information authorized by that provider.

B. Notion Workspace Data (Metadata Only)

This is the core data we process to provide the "Health Check" report. We strictly limit our access to metadata.

✅ What We Collect (Metadata):

Structural Information: Page IDs, Page Titles, and Parent/Child relationships.
Timestamps: Created time and Last Edited time.
Schema Information: Database property names and types.
URLs: Links to pages (to help you locate issues).
User IDs: The Notion internal IDs of users who created or edited a page (to identify "stale" owners).

❌ What We DO NOT Collect (Zero Content Policy):

Block Content: We do not access, read, store, or analyze the body text, notes, paragraphs, code blocks, or images within your pages.
File Attachments: We do not download or store files uploaded to your Notion workspace.
Comments: We do not read page comments.

C. Usage & Log Data

When you access our Service, our servers automatically collect certain data, including:

IP address and browser type.
Operating system and device information.
Interaction data (e.g., which reports you generated, error logs).

3. How We Use Your Information

We use the collected information for the following specific purposes:

To Provide the Service:

- To connect to the Notion API on your behalf.

- To analyze your workspace metadata (e.g., finding orphan pages or duplicate clusters).

- To generate and display the Health Score and detailed reports.

To Maintain Security:

- To authenticate your identity.

- To monitor for suspicious activity, API abuse, or technical errors.

To Improve Our Product:

- We analyze aggregated usage trends to understand which features are most valuable (e.g., "Do users prefer the Orphan Page scanner over the Stale Page scanner?").

- Note: We do not use your specific workspace metadata to train general-purpose AI models.

Communication:

- To send you technical notices, updates, security alerts, and support messages.

4. Legal Basis for Processing

If you are located in the European Economic Area (EEA), our legal basis for collecting and using the personal information described above depends on the personal information concerned and the specific context in which we collect it:

Contract: We process your data to fulfill our Terms of Service (i.e., to provide the health check you requested).
Legitimate Interests: We process usage data for security, debugging, and product improvement purposes.
Consent: Where required by law, we may ask for your consent (e.g., for marketing emails), which you can withdraw at any time.

5. Data Storage and Third-Party Service Providers

We do not sell your personal data. We trust specific third-party service providers to help us run our application. These providers are authorized to use your personal information only as necessary to provide these services to us.

Hosting & Infrastructure: We use cloud providers (e.g., Vercel, AWS) to host our application and run background scanning workers.
Database & Authentication: We use managed database services (e.g., Supabase) to securely store user accounts and report data.
Caching & Queues: We use in-memory data stores (e.g., Redis providers) to manage scanning queues and temporary data.

Data is generally stored and processed in secure data centers (typically located in the United States or EU, depending on our cloud configuration).

6. Data Retention

We only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy.

Account Data: Retained for as long as your account is active.
Notion Metadata (Scan Reports): We retain the results of your health checks for 7 days to allow you to review your recent scan history. After this period, detailed metadata is automatically deleted or anonymized.
Upon Disconnection: If you disconnect your Notion Workspace or delete your account, we will delete all associated Access Tokens and cached metadata from our active databases as soon as reasonably practicable and, in any event, within 7 days.

7. Security

We take the security of your data seriously and implement commercially reasonable technical and organizational measures to protect it.

Encryption at Rest: Your Notion OAuth Access Tokens are stored using AES-256 encryption (or equivalent industry standards). They are decrypted only in memory on our secure servers when a scan is initiated.
Encryption in Transit: All data transmitted between your browser, our servers, and the Notion API is encrypted via TLS/SSL (HTTPS).
Access Control: Access to production data is restricted to authorized personnel with a legitimate business need.

While we strive to use acceptable means to protect your data, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

8. Your Privacy Rights

Depending on your location (e.g., GDPR, CCPA), you may have the following rights regarding your personal data:

Access & Portability: You can request a copy of the data we hold about you.
Correction: You can ask us to fix incorrect data.
Deletion: You can ask us to delete your account and associated data.
Revocation of Access: You can revoke our access to your Notion Workspace at any time via the "Settings" menu in our Service or directly through Notion's "My Connections" settings.

To exercise any of these rights, please contact us at support@kunflow.com. We will respond to your request within a reasonable timeframe.

9. Children's Privacy

Our Service is intended for professionals and team administrators. We do not knowingly collect or solicit personal information from anyone under the age of 18. If you are a parent or guardian and believe we have collected information from a child, please contact us, and we will delete that information as soon as reasonably practicable.

10. International Data Transfers

Your information, including personal data, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

By using our Service, you consent to the transfer of your information to the United States (or other locations where our cloud infrastructure operates) and the processing of it there.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

For significant changes, we may notify you via email or a prominent notice within the Service. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Notion Health Check

Email: support@kunflow.com