Notion vs Dropbox

Notion says disclosure of browsing/device data to ad partners may count as a sale or sharing under privacy laws. For some users, that means their data can be used for targeted advertising unless they actively opt out.

The policy describes extensive automatic collection, including IP address, device identifiers, browsing activity, location, cookies, analytics, and cross-device tracking. That means Notion can build a fairly detailed usage profile.

If you use a workspace tied to an employer or organization, Notion may share profile details and workspace content with that organization. Users in workplace accounts should assume administrators may see a lot.

Depending on where you live, you may be able to access, correct, delete, restrict, object to processing, and even transfer your data. That gives users real control, though requests can be denied in some cases.

The policy says some users can receive their electronic information in a transferable form, and residents in some places can appeal a denied privacy request. Those are useful enforcement rights if you run into a problem.

Notion keeps data for as long as you use the service and afterward as needed for disputes, audits, legal obligations, and enforcement. That is common, but it means deletion is not immediate or absolute.

Notion may disclose information to service providers, affiliates, business partners, advertising partners, legal authorities, and during mergers or asset transfers. Users should expect substantial third-party access in ordinary operations.

Notion lets users opt out of certain targeted advertising and sale/sharing via settings or a footer link. That helps reduce ad profiling, though it does not stop all advertising or all data collection.

Notion says it does not respond to Do Not Track signals, but it does honor legally recognized browser opt-out signals like Global Privacy Control. That is better than ignoring browser-based privacy preferences entirely.

Notion says it may revise the Privacy Policy in its sole discretion and continued use counts as acceptance after the change takes effect. That gives the company significant power to update terms without individual consent.

The provided Terms of Service summary does not include the actual substantive contract terms, so key issues like arbitration, liability limits, refunds, or termination cannot be assessed from this excerpt. Users should review the full terms before signing up.

Most U.S. users must resolve disputes through individual arbitration unless they opt out within 30 days, and class actions are barred. This can make it harder to pursue claims collectively or in court.

Users can access, correct, download, delete, and in some cases object to processing of their personal data through settings or by request. Dropbox also supports taking your data elsewhere in machine-readable format.

If you open shared content in features with analytics, the content owner may see your identity, device details, and how long and what parts you viewed. This can reduce anonymity when reviewing shared documents.

On Dropbox Team accounts, organization admins may access, disclose, restrict, remove information, or terminate your access. Even non-team users interacting with team content may have some information exposed to that organization.

Dropbox broadly disclaims warranties and usually caps damages at the greater of $20 or the amount paid under the current plan. If something goes wrong, your financial recovery may be very limited.

Dropbox says your files remain yours and the terms do not transfer ownership. That is a strong baseline protection for users storing documents and media there.

Dropbox expressly says it does not sell your information to advertisers or other third parties. That is a meaningful privacy-positive commitment compared with many ad-supported services.

To run features like previews, OCR, search, and sharing, Dropbox may access, store, and scan your content, and extend that permission to affiliates and trusted third parties. This is operationally common, but it means your files are not treated as inaccessible to Dropbox systems.

Dropbox collects account, file-related, contact, usage, device, cookie, and viewer analytics information. For a productivity service this may be expected, but users should know the service monitors substantial metadata and activity.

Paid plans renew automatically until canceled, and refunds are generally only available where required by law. Users need to actively cancel to avoid future charges.

Dropbox commits to government request principles and publishes a transparency report about law-enforcement requests. That gives users more visibility into official data access demands.

After account deletion, Dropbox says it initiates deletion after 30 days, but backups and legal retention can delay full removal. This is fairly typical, though not immediate.