Notion vs Google Drive

Notion says disclosure of browsing/device data to ad partners may count as a sale or sharing under privacy laws. For some users, that means their data can be used for targeted advertising unless they actively opt out.

The policy describes extensive automatic collection, including IP address, device identifiers, browsing activity, location, cookies, analytics, and cross-device tracking. That means Notion can build a fairly detailed usage profile.

If you use a workspace tied to an employer or organization, Notion may share profile details and workspace content with that organization. Users in workplace accounts should assume administrators may see a lot.

Depending on where you live, you may be able to access, correct, delete, restrict, object to processing, and even transfer your data. That gives users real control, though requests can be denied in some cases.

The policy says some users can receive their electronic information in a transferable form, and residents in some places can appeal a denied privacy request. Those are useful enforcement rights if you run into a problem.

Notion keeps data for as long as you use the service and afterward as needed for disputes, audits, legal obligations, and enforcement. That is common, but it means deletion is not immediate or absolute.

Notion may disclose information to service providers, affiliates, business partners, advertising partners, legal authorities, and during mergers or asset transfers. Users should expect substantial third-party access in ordinary operations.

Notion lets users opt out of certain targeted advertising and sale/sharing via settings or a footer link. That helps reduce ad profiling, though it does not stop all advertising or all data collection.

Notion says it does not respond to Do Not Track signals, but it does honor legally recognized browser opt-out signals like Global Privacy Control. That is better than ignoring browser-based privacy preferences entirely.

Notion says it may revise the Privacy Policy in its sole discretion and continued use counts as acceptance after the change takes effect. That gives the company significant power to update terms without individual consent.

The provided Terms of Service summary does not include the actual substantive contract terms, so key issues like arbitration, liability limits, refunds, or termination cannot be assessed from this excerpt. Users should review the full terms before signing up.

Uploading content gives Google a worldwide, non-exclusive, royalty-free license to host, reproduce, distribute, modify, and use it to operate and improve services. For files in Drive, that is a substantial rights grant, even though Google says it does not claim ownership.

Google may add, remove, or modify features and functionalities, and may automatically install significant safety or security updates. Users can exit if changes significantly harm them, but the service itself can still change materially.

Google collects account details, content you store, device/browser data, activity, location, and data from partners or public sources. That means Drive sits inside a much broader tracking and profiling ecosystem than a standalone storage tool.

Some data is kept until you delete it, and some is retained longer for legitimate business or legal reasons. That means deletion is not always immediate and some information may persist for extended periods.

You can export a copy of your content and delete specific items, products, or your whole account. That gives you meaningful exit and cleanup options if you stop using Drive.

Google says it does not use Drive content for personalized ads. That is an important limitation on ad profiling for files stored in Drive.

Google may combine data across its services and devices, and may link partner-site activity to your account depending on settings. This increases the amount of behavioral data that can be associated with you.

Google can suspend or terminate access or delete accounts for repeated breaches, legal requirements, or conduct it believes causes harm. Users do have an appeal path, but the enforcement power is broad.

If your Drive account is managed by a school or employer, administrators may access stored data and limit your privacy controls. This is normal for managed accounts, but it materially reduces user control.

For EU and UK users, Google says you can access, correct, delete, restrict, object, and export your data, and withdraw consent where applicable. This gives users a clearer rights framework than many services.

If you are in the EEA or Switzerland, disputes are governed by your local law and can be filed in local courts. That is user-friendly compared with forcing all disputes into a distant forum.