1. Introduction

IVGraph ("we", "our", or "Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website ivgraph.com, the IVGraph dashboard and graph app, and our Notion widgets.

2. Information We Collect

2.1 Notion Workspace Data

When you connect IVGraph to your Notion workspace, we access:

Page titles and metadata (icons, covers, creation dates)
Page relationships and links between pages
Database structures and properties
Page content for AI-powered features (if enabled)

We only access data you explicitly authorize through the Notion OAuth flow.

2.2 Account Information

When you create an account, we collect:

Email address
Name (as provided by Notion)
Notion workspace ID
Your plan and subscription status. Payments are processed by Stripe; we do not receive or store your full card details.

2.3 Usage Data

When you use the website and the dashboard, we and our analytics providers automatically collect:

Pages you visit, buttons you click and features you use
Browser, device type, screen size and language
Approximate location (country and city, derived from your IP address by the analytics provider)
The website that referred you and campaign tags in the link (for example, utm_source)
Time and date of visits

2.4 How You Found Us and When You Return

On your first visit we store a first-party cookie (ivg_src, 180 days) with the first page you opened, the referring website (domain and path only), campaign tags and whether you arrived from an ad click. When you click "Sign in with Notion", we note the page and button you used (ivg_lead, 1 day). When you create an account, this information is saved with your account together with the Google Analytics browser and visit identifiers, so we can see which channels bring people to IVGraph. This record does not contain your email or IP address.

We also record the days on which you open the dashboard or the graph, and the days on which a widget link you saved is opened. We store the date only — not the time or what you did.

2.5 Notion Widgets

Marks you make in a free widget (for example, days in the habit tracker) are stored in your browser's local storage on that device, not on our servers.
If you save a widget in your dashboard, we store its settings (title, habit names, dates, colors) and a weekly count of how many times its link was opened.
If you click "Notify me" or "Want this", we store which feature you are interested in and the page where you clicked.

3. How We Use Your Information

We use your information to:

Generate and display your knowledge graph visualization
Provide widgets and AI-powered features like "Similar Nodes" discovery
Understand which pages and channels bring visitors and how people use the Service, so we can improve it
Process payments and manage subscriptions
Send service emails (for example, about your account or a feature you asked to be notified about)
Ensure security and prevent abuse

4. Data Storage and Processing

Our servers are hosted by Hetzner in the European Union (Finland). Your Notion data is processed to generate visualizations. We cache certain data to improve performance:

Graph structure data is cached for faster loading
Page metadata is stored to reduce API calls
AI embeddings may be stored for similarity features

Encrypted backups of our database are stored with Cloudflare R2 and kept for up to 12 months. You can ask us to erase all cached data at any time by disconnecting IVGraph from your Notion workspace.

5. Third-Party Services

We use the following third-party services:

Notion API: To access your workspace data (governed by Notion's privacy policy)
Hetzner: Server hosting in the EU
Cloudflare: Content delivery, security and encrypted backups (R2)
Google Analytics 4 and Google Tag Manager: Usage analytics. Google receives a random browser identifier from a cookie and, when you are signed in, our internal account number — never your email or name. Account creation is reported from our server with the same identifiers. Google Signals is turned off. Analytics data is kept for 14 months.
Microsoft Clarity: Heatmaps and session replays that help us improve the design. Text you type into form fields is masked.
Stripe: Payment processing and subscription management
Resend: Delivery of service emails
AI Services: For semantic search and similar nodes features (data is not retained)

Some of these providers process data outside the European Union, including in the United States, under their standard data protection terms.

We do not sell, trade, or rent your personal information. We do not use advertising pixels and do not share data with ad networks. We may share data only:

With your explicit consent
To comply with legal obligations
To protect our rights and safety
With the service providers listed above, who help us operate the Service

7. Data Security

We implement security measures including:

HTTPS encryption for all data transmission
Secure OAuth 2.0 authentication with Notion
Encrypted backups
Access controls and monitoring

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights

You have the right to:

Access: Request a copy of your data
Correction: Update inaccurate information
Erasure: Ask us to erase your account and data
Disconnect: Revoke IVGraph's access to your Notion workspace at any time
Export: Export your graph data
Object to analytics: Block or clear cookies in your browser settings, or use the Google Analytics opt-out add-on

To exercise any of these rights, email us at [email protected].

9. Cookies and Local Storage

We do not use cookies for advertising. We use:

Necessary: sign-in and security cookies set by our server; sign-in tokens and your dashboard preferences in your browser's local storage
Preferences: ivg_lang — the language of the site and dashboard (1 year)
Analytics: _ga and _ga_* (Google Analytics, up to 13 months), _clck and CLID (Microsoft Clarity, 1 year)
How you found us: ivg_src (180 days) and ivg_lead (1 day), described in section 2.4
Widgets: marks in free widgets are kept in local storage on your device

10. Data Retention

We keep your account data while your account is active. When you close your account, we erase its data, including how you found us and your activity days; it disappears from backups within 12 months. Google Analytics data is kept for 14 months.

11. Children's Privacy

IVGraph is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

Email: [email protected]
Website: ivgraph.com

Privacy Policy