Privacy Policy
This policy explains what Notion CSV Importer ("the app," "we") collects, why, and how it is protected. By using the app you agree to this policy.
What the app does
The app lets you import a CSV file into a Notion database you choose. You authorize it through Notion's official sign-in flow, and you decide which pages it may access during that flow.
Information we store
- Your Notion access token — issued by Notion when you connect, scoped only to the pages you grant. Stored encrypted and used solely to perform imports you request.
- Your workspace name — displayed in the app so you can see which account is connected.
- A session identifier — a random value in a cookie that keeps you signed in. It contains no personal data.
Information we do not store
- Your CSV files and their contents. Rows are processed in memory during an import and then discarded. We never keep, log, or analyze the data you import.
- Payment card details. If paid features are enabled, payments are handled entirely by Stripe. We never see or store your card number.
How your data is protected
- Access tokens are encrypted at rest using AES-256-GCM. The encryption key is held separately from the database, in a secure server environment.
- All connections to the app use HTTPS.
- Session cookies are HTTP-only (unreadable by scripts), SameSite, and marked Secure in production.
- The app requests only the Notion permissions it needs to function.
Third-party services
- Notion — your data lives in your Notion workspace; the app reads and writes there on your behalf, governed by Notion's own privacy terms.
- Railway — hosts the application and its encrypted token database.
- Stripe — processes payments if and when paid features are enabled.
Retention and deletion
Click Disconnect in the app at any time. This revokes the app's access with Notion and permanently deletes your stored token from our database. Expired sessions are removed automatically. You can also remove the connection directly from your Notion workspace settings.
Changes
We may update this policy. Material changes will be reflected by the date at the top of this page.
Contact
Questions or data requests: hello@joshhare.co