1. Scope and Purpose
This Privacy Policy describes how NotionGate collects, uses, stores, discloses, and protects personal data when you visit our website, create or use an account with an email address and password, use our desktop software, or contact our support team. We wrote this policy to be transparent and readable, and to cover the practical way the service works in production.
When we use terms such as "NotionGate," "we," "us," or "our," we refer to the service operator. When we use terms such as "you" or "user," we refer to any individual who accesses our website, documentation, software, or account features.
2. Data We Collect
We collect account and identity information you provide directly, such as your email address and authentication credentials when you register, sign in, or reset access. Passwords are processed using secure hashing practices and are not stored in plaintext.
We also collect service and technical information needed to provide and secure the product, including account metadata, application version details, security events, and operational logs. If you contact support, we may process the information you submit, including messages, attachments, and troubleshooting context.
For account-device linking and plan enforcement, we process a device identifier, including a hardware identifier (HWID) derived from device-level attributes. This identifier is used to associate an account with authorized devices and apply plan-based device limits.
We may receive diagnostic or error information through Sentry, including stack traces, runtime exceptions, and related technical metadata. This data helps us investigate incidents, maintain reliability, and resolve defects faster.
3. How We Collect Data
We collect information in three ways. First, we collect data you provide directly when creating an account, signing in, requesting support, or interacting with service workflows. Second, we collect technical and log data automatically from systems required to run and secure the service. Third, we may receive technical processing data from service providers we use to operate features such as error monitoring.
4. Why We Use Personal Data
We use personal data to create and manage accounts, authenticate access, provide requested product functionality, keep systems secure, prevent abuse, and respond to support requests. We also use diagnostics and operational data to monitor performance, investigate errors, and improve stability.
We use device identifiers, including HWID-derived identifiers, to link accounts to devices, enforce plan entitlements, prevent unauthorized sharing, and maintain licensing integrity.
We may process information to satisfy legal obligations, enforce our terms, protect our rights, and protect users and third parties from fraud, misuse, or security threats.
5. Legal Bases for Processing
Where applicable data protection law requires a legal basis, we process personal data because it is necessary to perform our contract with you, because it is necessary for our legitimate interests in operating and securing the service, because we must comply with legal obligations, or because you have given consent for specific processing activities.
If processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal and does not affect processing based on other legal grounds.
6. Disclosures and Service Providers
We share personal data only when needed to operate, secure, and support the service. This includes sharing with processors and vendors that provide technical infrastructure, authentication, support operations, and error monitoring tooling such as Sentry.
We may disclose information when required by law, legal process, or enforceable government request, and when necessary to protect the rights, safety, and security of users, our systems, or the public. We do not sell personal information and we do not share personal information for cross-context behavioral advertising.
7. Data Retention
We retain personal data for as long as reasonably necessary to provide the service you requested, maintain account integrity, resolve disputes, investigate abuse, enforce legal agreements, and comply with applicable law. Different categories of data may have different retention periods based on technical, contractual, and legal needs.
When data is no longer required for these purposes, we delete, anonymize, or securely isolate it according to our operational and legal obligations.
8. Security
We implement reasonable technical and organizational safeguards to protect personal data, including access controls, authentication protections, and secure handling practices for account credentials and service communications. No security system is perfect, and we cannot guarantee absolute security against every threat, but we continuously review and improve our safeguards.
9. International Data Transfers
Some providers used to operate the service may process data in countries other than your own. When international transfers occur, we apply safeguards required by applicable law, which may include contractual protections and comparable security requirements.
10. Your Privacy Rights
Depending on where you live, you may have rights to request access to personal data, correction of inaccurate information, deletion of data, portability of certain data, restriction or objection to certain processing, and withdrawal of consent where consent applies.
California residents may have additional rights under state privacy law, including the right to know, delete, and correct personal information, and the right to non-discrimination for exercising privacy rights. You can submit a request by contacting support [at] notiongate [dot] app. We may need to verify your identity before completing certain requests.
11. Children
Our services are not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, contact us and we will take reasonable steps to investigate and delete the data where required.
12. Cookies and Similar Technologies
Our website and supporting infrastructure may use cookies, local storage, and similar technologies for core functionality, security, and performance. We do not currently use personal data for cross-context behavioral advertising, and we do not sell personal information.
You can manage browser-level cookie preferences through your browser settings. If cookies are disabled, some parts of the website may not function as intended.
13. Third-Party Links and Services
Our website and documentation may contain links to third-party websites or services. This Privacy Policy applies to NotionGate services only. If you visit external services, you should review their privacy policies because we do not control their processing practices.
14. Business Transfers
If NotionGate is involved in a merger, acquisition, financing due diligence, reorganization, sale of assets, or transition of service operations, personal data may be transferred as part of that transaction, subject to applicable legal safeguards.
15. Exercising Rights and Complaints
You can exercise applicable privacy rights by contacting support [at] notiongate [dot] app. We may request additional information to verify identity before completing requests. If you believe your request was not handled appropriately, you may have the right to lodge a complaint with your local supervisory authority, where available under applicable law.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, operational, or product changes. When we make updates, we will publish the revised version on this page and update the "Last updated" date. Material changes become effective when posted unless a different effective date is stated.
17. Contact
If you have questions about this Privacy Policy or want to exercise applicable privacy rights, contact us at support [at] notiongate [dot] app.
This document is provided for transparency and product operations. It is not legal advice. If you need legal advice for your specific situation, consult qualified legal counsel.