Strongest: AI Training
90/100
Notion is strongest where it keeps customer workspace data out of default AI training and gives teams workspace, permission, and AI settings.
Notion is a connected workspace for docs, wikis, databases, and AI features, reviewed here for Customer Data controls, AI subprocessors, advertising disclosures, retention, and export/deletion controls.
75
Good
75
Good
Notion AI can reference workspace content, connected apps, and web results, while Notion says customer data is not used for model training.
Notion is strongest where it keeps customer workspace data out of default AI training and gives teams workspace, permission, and AI settings.
The main risk is now AI scope and retention: workspace embeddings, connected apps, web search, subprocessors, and non-Enterprise retention settings.
90
Excellent
Notion says Notion AI does not use user data to train models unless the user opts in.
AI subprocessors are contractually prohibited from using Customer Data to train their models.
Notion AI still shares relevant data with AI subprocessors to provide AI features.
LLM-provider retention differs by plan, with zero retention for Enterprise and 30-day retention for non-Enterprise.
75
Good
Customer Data is owned and controlled by the customer.
The privacy policy discloses advertising partners and CCPA sale/share for some online identifiers and usage categories.
Notion discloses vendors, subprocessors, and AI subprocessors for service delivery.
Workspace sharing and connected access can expose content to other workspace users based on permissions.
45
Weak
Notion discloses advertising partners for marketing its own services.
CCPA sale/share may apply to online identifiers, network activity, general geolocation, and inferences.
Notion says it does not use service data to advertise third-party products through the Services.
Opt-out is available through Do Not Sell or Share My Info.
70
Mixed
AI provider retention differs by plan, with zero retention for Enterprise and 30 days for non-Enterprise.
Deleted pages stay in Trash for 30 days by default.
Permanently deleted pages are retained for another 30 days before becoming inaccessible.
Enterprise owners can customize retention from 1 day to 10 years.
85
Good
Users can export workspace content in common formats.
Users can delete pages, accounts, and workspaces.
Workspace owners control permissions, groups, and user access.
Some retention and compliance controls are Enterprise-only.
Notion Privacy Page
Open: notion.soLatest Finding
Open: notion.comProduct Ai
Open: notion.comNotion Privacy Page
Open: notion.comNotion Privacy Page
Open: notion.comHelp Back Up Your Data
Open: notion.comHelp Custom Data Retention Settings
Open: notion.comHelp Duplicate Delete And Restore Content
Open: notion.com1. AI Use
Notion says Notion AI does not use user data to train models unless the user opts in.
2. AI Use
AI subprocessors are contractually prohibited from using Customer Data to train their models.
3. AI Use
Notion AI still shares relevant data with AI subprocessors to provide AI features.
4. Retention
LLM-provider retention differs by plan, with zero retention for Enterprise and 30-day retention for non-Enterprise.
Founded
Jan 2013
Founder
Ivan Zhao and Simon Last
Parent Company
Notion
Lifecycle
Active
Category
Productivity & Collaboration
CEO
Ivan Zhao
Security Team
Security Team
Date Added
06-10-2026
