Notion vs Trello
Side-by-side comparison of the Terms of Service and Privacy Policy of Notion and Trello.
Notion provides a solid set of privacy rights and opt-outs, but its privacy policy is expansive on collection, cross-device tracking, advertising, and sharing with third parties and organizations. The terms excerpt provided does not reveal other user protections or contract limits, so the overall picture is moderate rather than clearly user-friendly.
Notion’s legal posture is fairly standard for a modern SaaS product, with broad data collection for service delivery, analytics, marketing, and advertising. It offers meaningful privacy rights in many regions, including access, deletion, correction, portability, and opt-outs for marketing and some targeted advertising. However, it also discloses sharing with collaborators and organizations, international transfers, data retention tied to business/legal needs, and some ad-related sharing that may count as a sale under privacy laws.
Points of interest
-
negative ●●●●● privacyAd data may be sold
Notion says disclosure of browsing/device data to ad partners may count as a sale or sharing under privacy laws. For some users, that means their data can be used for targeted advertising unless they actively opt out.
-
negative ●●●●○ privacyBroad automatic tracking
The policy describes extensive automatic collection, including IP address, device identifiers, browsing activity, location, cookies, analytics, and cross-device tracking. That means Notion can build a fairly detailed usage profile.
-
negative ●●●●○ privacyShares data with organizations
If you use a workspace tied to an employer or organization, Notion may share profile details and workspace content with that organization. Users in workplace accounts should assume administrators may see a lot.
-
positive ●●●●○ privacyDeletion and access rights
Depending on where you live, you may be able to access, correct, delete, restrict, object to processing, and even transfer your data. That gives users real control, though requests can be denied in some cases.
-
positive ●●●●○ privacyPortability and appeal rights
The policy says some users can receive their electronic information in a transferable form, and residents in some places can appeal a denied privacy request. Those are useful enforcement rights if you run into a problem.
-
negative ●●●○○ privacyLong retention periods
Notion keeps data for as long as you use the service and afterward as needed for disputes, audits, legal obligations, and enforcement. That is common, but it means deletion is not immediate or absolute.
-
negative ●●●○○ privacyWide disclosure to others
Notion may disclose information to service providers, affiliates, business partners, advertising partners, legal authorities, and during mergers or asset transfers. Users should expect substantial third-party access in ordinary operations.
-
positive ●●●○○ privacyOpt-out for targeted ads
Notion lets users opt out of certain targeted advertising and sale/sharing via settings or a footer link. That helps reduce ad profiling, though it does not stop all advertising or all data collection.
-
positive ●●●○○ privacyNo DNT response, GPC honored
Notion says it does not respond to Do Not Track signals, but it does honor legally recognized browser opt-out signals like Global Privacy Control. That is better than ignoring browser-based privacy preferences entirely.
-
negative ●●○○○ privacyPolicy can change unilaterally
Notion says it may revise the Privacy Policy in its sole discretion and continued use counts as acceptance after the change takes effect. That gives the company significant power to update terms without individual consent.
-
neutral ●●○○○ termsTerms excerpt incomplete
The provided Terms of Service summary does not include the actual substantive contract terms, so key issues like arbitration, liability limits, refunds, or termination cannot be assessed from this excerpt. Users should review the full terms before signing up.
Documents
The documents contain several user-protective features, but they are balanced by auto-renewal, broad liability limits, unilateral changes, and a strong business-contract framing that gives the customer/employer substantial control over data.
Trello is covered by Atlassian’s broader cloud agreement and privacy policy. The terms are fairly standard for a business productivity service: Atlassian can process customer data under a DPA, suspend access for policy or security issues, auto-renew subscriptions, and limit liability substantially. On the plus side, the agreement includes a 30-day return policy for initial orders, a stated security program, data retrieval guidance, and some privacy rights/choices—though much of the privacy posture is customer-controlled in employer-managed accounts.
Points of interest
-
negative ●●●●○ termsAuto-renews by default
Subscriptions renew automatically unless you give notice before the term ends. That can lead to unwanted charges if you miss the cancellation window.
-
negative ●●●●○ termsBroad liability cap
If something goes wrong, Atlassian’s liability is generally capped at the fees paid in the prior 12 months. That can leave limited recovery for outages, losses, or service failures.
-
positive ●●●●○ terms30-day return policy
For an initial order, you can cancel within 30 days for any reason and get a refund. That gives new customers a meaningful trial-like exit option.
-
positive ●●●●○ termsData deletion after termination
After the agreement ends, Atlassian says it will delete customer data according to the documentation, unless law prevents it. That is a useful sign for cleanup and offboarding.
-
negative ●●●○○ termsOne-sided terms changes
Atlassian can modify the agreement by posting updates, sometimes during your current term. If you object, your main remedy is to terminate the affected subscription and get a refund for unused prepaid fees.
-
negative ●●●○○ termsNo refund on cancellation
You can terminate for convenience, but you generally will not get a refund except under the initial 30-day return policy. That makes mid-term cancellation financially costly.
-
negative ●●●○○ termsCustomer responsible for users
The customer is responsible for user compliance, user activity, and how users access customer data. In practice, account admins and employers carry much of the risk for misuse.
-
positive ●●●○○ termsData retrieval documented
The terms say the documentation explains how customers can retrieve their data from the cloud products. That supports portability and offboarding planning.
-
positive ●●●○○ termsSecurity program promised
Atlassian says it maintains security measures and independent third-party audits/certifications. This does not eliminate risk, but it is a concrete security commitment.
-
positive ●●○○○ privacyPrivacy choices available
The privacy policy says you may object to certain uses and can access or update certain information. That suggests some user control over Atlassian-held personal data.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.