Privacy Policy — Iunami for Notion

Last updated: March 30, 2026

This privacy policy applies specifically to the Iunami for Notion Chrome browser extension. It describes exactly what data the extension collects, how it is used, where it is stored, and with whom it is shared. For the privacy policy covering the Iunami AI website and platform services, please see our main Privacy Policy.

Summary of Key Points

What data does the extension process? Your Notion integration token, workspace configuration (page names, icons, database structures), Pomodoro timer settings, and UI preferences — all stored locally on your device.
Who do we share data with? Only Notion Labs, Inc. via the Notion API (https://api.notion.com) to perform actions you explicitly request. No analytics, advertising, or other third-party services receive your data.
How do we store and protect your information? All data is stored locally on your device via Chrome's chrome.storage.local API. We implement endpoint allowlisting, rate limiting, token validation, and input sanitization.
Do we collect personal information? The extension may process personal data such as email addresses and phone numbers only when you voluntarily enter them into database entry forms for Notion database property validation. This data is stored locally and sent only to Notion Labs, Inc. via the Notion API.

1. Data We Collect

The extension collects and stores the following data locally on your device via Chrome's local storage API (chrome.storage.local). All data is collected directly from you through your interaction with the extension's user interface elements (for example, entering your Notion integration token, configuring workspace settings, and adjusting preferences); no data is gathered through background scripts, content scripts injected into web pages, cookies, or any other passive or automated mechanism.

Notion Integration Token — the API token you provide to connect your Notion workspace. Required for the extension to function.
Workspace Configuration — names, IDs, icons, and database schemas of your connected Notion pages and databases.
User-Entered Content — data you type into manual entry forms before it is sent to Notion as a new database entry. This may include personal data such as email addresses and phone numbers when your Notion database contains email or phone number properties. This data is collected solely for the purpose of validating the entry against your Notion database schema before submission.
Pomodoro Timer Settings — your timer durations and current timer state (work/break mode, time remaining).
Extension Preferences — your chosen display mode (side panel or popup) and theme settings.

Tab URL Data

The extension reads your active browser tab URL only to check whether the current page is a Notion page (matching notion.so domains). This check happens locally on your device. URLs are not stored, logged, recorded, or transmitted to any server. No browsing history or browsing activity is collected. Non-Notion URLs are immediately discarded and never processed.

2. How We Use Your Data

Notion Integration Token — used exclusively to authenticate requests to Notion Labs, Inc. via the Notion API (https://api.notion.com) on your behalf (reading databases, creating pages).
Workspace Configuration — displayed within the extension interface so you can browse and select databases.
User-Entered Content — validated locally against your Notion database schema (e.g., checking email format for email properties, phone number format for phone properties) and then sent to Notion Labs, Inc. via the Notion API (https://api.notion.com) to create new database entries when you submit a form. This data is not stored beyond the current form session.
Tab URL Detection — checked in real time against notion.so to extract a page ID for one-click workspace connection. No URLs are stored, logged, or transmitted — the check happens locally and non-Notion URLs are immediately discarded.
Timer State & Preferences — used to persist your focus timer and UI settings between sessions.

3. Data Storage

All extension data is stored locally on your device using Chrome's chrome.storage.local API. No data is stored on any external server, cloud service, or database owned or operated by Iunami. We do not maintain any databases, servers, or cloud storage for extension user data.

Iunami does not operate any backend servers for this extension. Your data never leaves your device except when you explicitly initiate an action that sends data to Notion.

4. Data Sharing & Third Parties

Your extension data is shared with the following third party:

Notion Labs, Inc. via the Notion API (https://api.notion.com) — your Notion integration token and any data you submit through the extension (such as new database entries) are sent directly to Notion Labs, Inc. via the Notion API (https://api.notion.com) to perform the actions you request. Only the data required for that specific operation is transmitted. This communication is governed by Notion's Privacy Policy.

We do not use analytics or tracking services, advertising networks, or any other third-party data processors in the extension. No data is sold to any party. No data is transmitted to any server other than Notion Labs, Inc. via the Notion API (https://api.notion.com).

5. Data Retention & Deletion

Your extension data persists in Chrome's local storage until you:

Remove your Notion token or disconnect a workspace within the extension settings.
Uninstall the extension, which clears all locally stored data.
Clear your browser's extension data through Chrome settings.

6. Personal Data

The Iunami for Notion Chrome extension may process personal data such as email addresses and phone numbers only when you voluntarily enter them into database entry forms. This occurs when your connected Notion database contains email or phone number properties, and the extension validates these values against the database schema before submitting them to Notion Labs, Inc. via the Notion API (https://api.notion.com). This user-entered data is not persistently stored by the extension — it exists only during the active form session and is sent exclusively to Notion. The extension does not collect personal data such as your name, physical address, or any other identifying information through any other mechanism. No personal data is sold, shared with third parties (other than Notion), or used for advertising.

7. Security Measures

The extension implements the following security measures to protect your data:

API endpoint allowlisting — only approved Notion API endpoints can be called.
Request method validation — only permitted HTTP methods (GET, POST, PATCH) are allowed.
Rate limiting — prevents excessive API requests.
Token format validation — verifies your Notion token matches the expected format before use.
Request body size limits — prevents oversized payloads.
Input sanitization — all user-provided data is sanitized before being sent to Notion Labs, Inc. via the Notion API (https://api.notion.com).

8. Browser Permissions

The extension requests only the permissions necessary for its functionality:

storage — save your token, workspace data, timer state, and preferences locally on-device.
sidePanel — render the extension interface in Chrome's side panel.
tabs — detect when you visit Notion pages for automatic workspace suggestions.
Host permissions (api.notion.com, notion.so, www.notion.so) — make Notion API calls and match Notion tab URLs.

9. Remote Code

This extension does not load or execute any remote code. All JavaScript is bundled within the extension package.

10. Google API Services Limited Use Disclosure

Iunami for Notion's use and transfer to any other app of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:

We only use data for the single purpose of providing and improving the Iunami for Notion extension functionality.
We do not transfer user data to third parties except to Notion Labs, Inc. via the Notion API (https://api.notion.com) as necessary to provide core extension features.
We do not use or transfer user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
We do not use or transfer user data to determine creditworthiness or for lending purposes.
We do not sell user data to any third party.

11. Children's Privacy

This extension is not directed at children under the age of 13 and does not knowingly collect data from children.

12. Changes to This Policy

If this policy is updated, the revised version will be published at this same URL with an updated "Last updated" date. Continued use of the extension after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or comments about this privacy policy, you may email us at support@iunami.com.

Iunami AI SDN BHD

Malaysia