This Privacy & Data Security Policy explains how Note Graph (the “Extension”) handles data. Note Graph is designed to be local-first: it reads your Notion workspace data (via the Notion API) to generate a relationship graph, and stores the resulting graph data locally in your browser.

1. What data we access from Notion

After you connect Notion, the Extension may read (depending on your authorization scope):

• Page and database identifiers and titles.
• Page and database content needed to detect relationships (for example: block structure and rich text that contains links, mentions, and backlinks).
• Relationship information (page mentions, linked pages/databases, relation properties).
• Basic metadata used for display and filtering (e.g., created time, last edited time, created by / last edited by).

2. How we use that data

• Generate graphs: build a relationship graph (nodes + links) for visualization and navigation.
• Improve usability: cache results locally so subsequent loads are faster.
• Subscription state: determine whether Pro features are enabled.

3. Where your data is stored

The Extension stores data locally in your browser using Chrome extension storage and local web storage mechanisms (e.g., Local Storage / IndexedDB). This includes cached graph data, graph metadata, and certain UI preferences.

• Notion access token: stored locally in Chrome extension storage.
• Graph cache: stored locally (nodes, edges, and labels) to speed up rendering and allow quick reloads.
• User directory (optional): a local mapping of user IDs to display names (stored locally for better labels).
• Subscription state: may be cached locally to avoid repeated checks.

Local data remains on your device until you clear it (for example, via the Extension’s clear cache action) or uninstall the Extension.

4. Chrome permissions (why the Extension asks)

• identity: required to complete Notion OAuth in a secure browser flow.
• storage: required to store your token, cache graph data, and save settings locally.
• tabs: used to detect the current Notion tab (e.g., “Focus current page”) and to open tab view when enabled.
• sidePanel: required to render Note Graph in the Chrome side panel.
• offscreen: used to run long-lived background fetch tasks without blocking the UI.

5. Data we do NOT upload (by default)

Note Graph does not upload your Notion page content to Note Graph-operated servers for graph processing. Notion content is requested directly from Notion’s API to your device, and the graph is generated locally. The graph is generated and rendered within the extension environment. If we introduce future cloud features (e.g., “Cloud Share”), they will be opt-in and clearly disclosed.

6. OAuth authorization and token exchange

To connect your Notion account, the Extension uses Notion OAuth. During the OAuth flow, an authorization code is exchanged for an access token via an OAuth exchange service:

• OAuth exchange endpoint: https://notion-oauth.notegraph.net/
• Data sent: OAuth authorization code and redirect URI.
• Data returned: Notion access token.

This exchange service is used to complete the OAuth process; it should not require your Notion content. Like any web request, the exchange service will also receive standard network information (such as IP address and user agent) as part of processing the request. You should treat the access token as sensitive and keep it private.

7. Payments and subscriptions

Pro subscriptions are processed by ExtensionPay. The Extension uses ExtensionPay to open a checkout page and to read subscription status. We do not receive your full payment card details; ExtensionPay handles payment information directly. For details, see Third-Party Disclosures.

8. Support communications

If you contact us at support@notegraph.net, we will receive your email address and the content of your message. We use that information to respond to you and provide support.

9. Third-party services (disclosure summary)

We rely on third-party services to provide core functionality (Notion) and billing (ExtensionPay). The marketing site may also load assets from CDNs. These third parties may process data according to their own privacy policies, and may receive standard web request data (such as IP address, user agent, and referrer) when your browser connects to them. See the full list on the Third-Party page.

10. Security

We use local storage by default and limit data access to what is necessary for graph generation. No method of electronic storage is 100% secure; you use the Extension at your own risk.

11. Your choices

• You can revoke Notion access at any time in Notion’s settings.
• You can clear locally cached graph data using the Extension’s Clear cached data action.
• You can uninstall the Extension to remove local data stored by the Extension.

12. Contact

Questions? Contact support.

These Terms of Service (“Terms”) govern your use of Note Graph (the “Extension”) and this website (together, the “Service”). By installing or using the Service, you agree to these Terms.

1. Eligibility

You must be legally able to enter into a binding agreement to use the Service. If you use the Service on behalf of an organization, you represent that you have authority to bind that organization.

2. License

We grant you a limited, non-exclusive, non-transferable, revocable license to use the Extension for your personal or internal business purposes, subject to these Terms and applicable laws.

3. Acceptable use

You agree not to:

• Reverse engineer, decompile, or attempt to extract source code from the Service except to the extent permitted by law.
• Use the Service to violate any law, regulation, or third-party rights.
• Interfere with or disrupt the Service (including bypassing feature gates or subscription checks).
• Use the Service to process data you do not have permission to access.

4. Notion connection

The Service integrates with Notion via OAuth and the Notion API. Your use of Notion is governed by Notion’s own terms and policies. We are not affiliated with Notion.

5. Subscriptions and payments

Pro subscriptions are billed through ExtensionPay. Pricing shown on this website may be updated and may not reflect taxes or local pricing. Subscription status is checked within the Extension. Cancellation and renewal are managed through the payment provider’s flows.

6. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. We do not warrant that the Service will be uninterrupted, secure, or error-free.

7. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF DATA, PROFITS, OR REVENUE, ARISING FROM OR RELATED TO YOUR USE OF THE SERVICE.

8. Changes and termination

We may modify the Service or these Terms from time to time. If changes are material, we will update the “Last updated” date. We may suspend or terminate your access to the Service if you violate these Terms.

9. Contact

If you have questions about these Terms, contact support.

Note Graph relies on third-party services and libraries to provide functionality. This page lists key third parties and what data may be shared with them.

1. Services used by the Extension

• Notion API (https://api.notion.com/): used to read authorized workspace data needed to build the graph.
• Notion OAuth (https://api.notion.com/v1/oauth/authorize): used to request user authorization.
• OAuth exchange service (https://notion-oauth.notegraph.net/): exchanges OAuth authorization code for a Notion access token.
• ExtensionPay (https://extensionpay.com/): provides checkout and subscription status for Pro.

2. Services used by this marketing website

When you visit this website, your browser may connect to third-party CDNs to load fonts and scripts. These providers may receive standard web request data (such as IP address, user agent, and referrer) as part of serving those resources.

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com): font loading.
• Tailwind CDN (https://cdn.tailwindcss.com): CSS framework runtime.
• unpkg (Lucide icons) (https://unpkg.com): icon library loading.

3. Notes

• This list may change as the Service evolves. We will update this page when we make material changes.
• Third parties have their own terms and privacy policies. Review them before use.

4. Contact

If you have questions about third-party services, contact support.