3 ms·

I share your concerns, that's why I made sure they are GDPR compliant before becoming a subscriber. If you're not based in the UK or EU, say you're in the US..

by icu 6y ago

I share your concerns, that's why I made sure they are GDPR compliant before becoming a subscriber. If you're not based in the UK or EU, say you're in the US... well good luck. Swiss cheese has fewer holes than US privacy laws! Having said all that, as a user of Notion I've been incredibly impressed. Their support staff seem friendly and responsive and they keep making the product better and better. My only gripes are the weird password email confirmation of the mobile app login, and that I can't use it as a Zettelkasten. Other than that, it really is fantastic. The Kanban and other features meant that it's replaced other apps I was using for both work and personal. It really is worth a try.

krono 6y ago
GDPR Compliance is nice and all, but as long as their staff has the ability to access my data, I just can't legally host most of my business data on that platform. Other than that and the terrible performance I love Notion and I really hope they get this sorted. I'll even keep paying for my personal account (drop in the bucket, I know) in the hopes that they will.
- icu 6y ago
  For me GDPR was a make or break. I know I'm putting faith in Notion staff to follow GDPR guidelines because if they accessed my information without an extremely good reason it would be a breach. The only other option would be for me to create my own solution, and while I could do that, I don't have the time or the desire to do it. I think you got to be careful and read the TOS and know what you're in for. For example, I stopped using the free version of Grammarly after I found out they weren't GDPR compliant and their support wouldn't confirm if they were going to be GDPR compliant. A year later I evaluated Grammarly again and they were, so I subscribed to Grammarly premium. However some companies are so egregious in their lack of respect of privacy that I will never trust them again, for example Facebook. Others are so impossible to get away from, like Google, that I limit my exposure as much as possible. Bottom line is be aware of how your privacy will be handled and make sure you're conscious of the trade off decisions you're making.
  - krono 6y ago
    For private individual usage this should be enough. In the case of business data governance, though, the legal requirements for storage, security, and privacy go far beyond GDPR. The difficulty there is that even small things such as contact info, appointment locations and dates, timelines, etc. are covered by those contracts.

by icu 6y ago

krono 6y ago

GDPR Compliance is nice and all, but as long as their staff has the ability to access my data, I just can't legally host most of my business data on that platform. Other than that and the terrible performance I love Notion and I really hope they get this sorted. I'll even keep paying for my personal account (drop in the bucket, I know) in the hopes that they will.

icu 6y ago
For me GDPR was a make or break. I know I'm putting faith in Notion staff to follow GDPR guidelines because if they accessed my information without an extremely good reason it would be a breach. The only other option would be for me to create my own solution, and while I could do that, I don't have the time or the desire to do it. I think you got to be careful and read the TOS and know what you're in for. For example, I stopped using the free version of Grammarly after I found out they weren't GDPR compliant and their support wouldn't confirm if they were going to be GDPR compliant. A year later I evaluated Grammarly again and they were, so I subscribed to Grammarly premium. However some companies are so egregious in their lack of respect of privacy that I will never trust them again, for example Facebook. Others are so impossible to get away from, like Google, that I limit my exposure as much as possible. Bottom line is be aware of how your privacy will be handled and make sure you're conscious of the trade off decisions you're making.
- krono 6y ago
  For private individual usage this should be enough. In the case of business data governance, though, the legal requirements for storage, security, and privacy go far beyond GDPR. The difficulty there is that even small things such as contact info, appointment locations and dates, timelines, etc. are covered by those contracts.