Privacy Policy
Last Updated: May 07, 2026
We value your privacy. This policy outlines how we handle your data when you use Notion Avatar. The short version: we never store the photos you upload, and you can delete your account and all associated data at any time from the Account page.
Information We Don't Collect
Notion Avatar is designed with privacy in mind:
- No Storage of Uploaded Photos: Photos you upload to the AI Avatar Generator are never stored on our servers or in our database. They are passed to the AI model only as transient input and discarded from memory after the request completes.
- No Personal Data Requirements: The classic editor (manual avatar customization) works entirely within your browser and does not require an account or send any images to our servers.
How We Handle Uploaded Photos
When you use the AI Avatar Generator's Photo to Avatar mode, the photo you upload follows this strict, privacy-first lifecycle:
- •Transient Processing Only: Your original photo is sent to the AI model (Google Gemini) as input for that single request. We do not persist it to any database, file system, object storage, or backup.
- •No Server-Side Logs: Original images are never written to application logs or analytics systems.
- •Generated Avatars: Only the resulting black-and-white Notion-style avatar may be stored, and only for Pro subscribers as part of their generation history. These are stored in a private bucket and accessed via short-lived signed URLs (1-hour expiry).
- •Third-Party AI Providers: The AI model provider processes your image according to its own privacy policy. We do not retain copies in our environment.
- •Classic Editor: Manual avatar customization runs entirely in your browser; no images are ever transmitted to our servers.
Information We Do Collect
We collect limited information to improve our service:
- •Usage Data: We use analytics tools to collect anonymous information about how users interact with our website. This includes:
- ◦Browser type and version
- ◦Operating system
- ◦Time and duration of visit
- ◦Pages visited
- ◦Referring website
- •Cookies: We use cookies to enhance your experience and collect anonymous usage data. You can configure your browser to reject cookies, but this may limit some functionality.
How We Use Information
The limited information we collect is used for:
- •Analyzing usage patterns to improve our website
- •Diagnosing technical issues
- •Enhancing the user experience
- •Understanding which features are most valuable to users
Third-Party Services
We use the following third-party services:
- •Google Analytics: We use Google Analytics to understand user behavior. Google Analytics may collect information about your device, browsing session, and how you interact with our site. You can learn more about Google Analytics' privacy practices at Google's Privacy Policy.
- •Google AdSense: We display advertisements through Google AdSense, which may use cookies to personalize advertisements based on your browsing behavior.
Your Rights
In line with the EU General Data Protection Regulation (GDPR) and similar privacy laws, you have the right to:
- •Request information about what data we have collected about you
- •Request deletion of data where applicable (Right to Erasure, GDPR Article 17)
- •Request a copy of your personal data (Right to Data Portability, GDPR Article 20)
- •Opt out of cookies and tracking technologies
- •Object to our use of your information
Self-Service Account Deletion
If you have created an account, you can permanently delete your account and all associated data at any time:
- Sign in and go to the Account page.
- Scroll down to the Danger Zone section and click Delete Account.
- Confirm by typing your email address in the dialog that appears.
Once confirmed, the deletion takes effect immediately and removes:
- Your profile and login credentials (auth records)
- Your active Stripe subscriptions (canceled without refund) and Stripe customer record
- All generated avatars stored in our private bucket
- Generation history, daily usage counters, and credits
- Resource pack purchase records and promo redemptions
Account deletion is irreversible. If you would prefer to submit a request manually, or to exercise any other right (access, portability, objection), email us at contact@notion-avatar.app and we will respond within 30 days as required by GDPR.
Children's Privacy
Our service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we might have collected information from a child under 13, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us at contact@notion-avatar.app