Notipala
Back to workspace ↗
Who this policy covers
Notipala is a research and personal knowledge workspace. This policy covers accounts, conversations, uploaded files, connected sources and the summaries, embeddings and knowledge graphs created from them. For privacy questions or requests, contact the operator of Notipala at [email protected] .
Information we access
We process account identifiers, email address and profile information supplied by your sign-in provider; your prompts and conversations; uploaded documents; selected connected-source content; and generated summaries, relationships and embeddings. Operational records can include request identifiers, processing status, errors and usage counts. Browser storage supports authentication and preferences.
When you connect Gmail
Google sign-in and Gmail access are separate choices. Connecting Gmail requests read-only mailbox access using gmail.readonly. That permission is broader than an individual selection: Notipala uses it to preview matching messages and retrieve messages and attachments you choose to import. Filters do not narrow the underlying Google permission. We access message and thread IDs, sender and recipient details, subject, timestamps, labels, body and selected-message attachments. Each import is limited to 10 messages. We do not use this connection to send, modify or delete mail.
Google data and derived information
Google data includes preview metadata, selected message bodies and attachments, and the summaries, extracted text, sections, relationships and embeddings generated from that content. These protections also apply when Google data is aggregated or anonymized; changing its format does not remove the Limited Use restrictions. Previewing does not import a message into your session, but the service processes metadata to display matching results.
When you connect Notion
Notipala can discover pages shared with its Notion connection. When you import selected pages, we process page IDs, titles, author information where available, timestamps, body content and attachments. Each import is limited to 3 pages. Only share pages you are permitted to process.
How your content is used
We normalize imported content, extract text from supported attachments, and use OCR when needed. We keep the body and attachment boundaries and source references. We generate searchable memory, Personal and Research sections, links and answers for your workspace. Generated summaries and inferences can contain personal information and are covered by this policy. They can also be wrong; review important results.
Google API data and Limited Use
Notipala’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements. These commitments cover raw Google Workspace API data and data derived, aggregated or anonymized from it. Google user data is used only to provide or improve the user-facing features you request. It is not sold, used for advertising, or used to train generalized AI or machine-learning models. Transfers are limited to providing those features, security purposes, legal requirements, or a business transfer with your prior explicit consent. Human access is limited to your affirmative consent for specific data, security investigations, legal obligations, or aggregated and anonymized internal operations permitted by that policy.
Protection of Google data
The hosted application and OAuth callbacks use HTTPS. Application access is tied to the signed-in account, and saved connector tokens are encrypted on the server with a separately configured key. OAuth client secrets are not included in browser code. Imported content and derived memory are associated with the importing user's sessions. These controls are not a claim of completed independent security certification.
Storage, retention and deletion
Imported source records, extracted attachment text, conversations and derived memory remain associated with your session until deleted. Connector credentials are stored encrypted on the server. Disconnecting a connector removes its saved connection credentials; it does not delete previously imported content or remove the grant in your provider account. Delete the relevant conversation to remove its stored session data and graph artifacts. To request account deletion, access, correction or export, email [email protected] from your account address. We may verify your identity. We do not promise an instant purge of every infrastructure log or backup; contact us about residual records and applicable retention before importing content with strict retention requirements.
Your choices and rights
You can choose not to connect external sources, change filters before an import, disconnect a source, and revoke Google access in Google Account connections . Remove Notipala’s access in Notion to revoke that grant. Depending on your location, you may have additional rights to access, correct, delete, restrict or object to processing, or complain to your local privacy authority. Contact us to exercise those rights.
Other important information
Providers may process information in countries other than your own. Contact us for deployment-specific processing locations and transfer arrangements. Notipala is intended for adults and is not directed to children. If you believe a child has supplied personal information, contact us. We update this page when practices change and identify the updated date above; changes requiring additional consent will be presented before that new processing.
Let’s talk.
Privacy, account or security questions? [email protected]