I've been a long-time user of Notion (the free plan). I've used it to store personal (not too personal) documents such as tech notes, grocery items, blog snippets, quotes from books i've read, etc.
Recently I started using it at work as well to store notes from meetings, logging my work journal, my to-do list, and other elements as well (like a scratchpad). Notion has been approved by our security team, and it was important that we don't put any company-confidential information in our notes (which I avoid doing at all costs).
I wanted to activate the Notion AI feature today (as I received an email that i'm off the waitlist). I started reading AI program terms[1], which led me to the Master Subscription Agreement[2], which also led me to the Data Processing Addendum[3].
The following paragraph (in [1]) captured my interest:
> You may provide input to be processed by Notion AI (“Input”), and receive output generated and returned by the Notion AI based on the Input (“Output”). Input and Output are your Content or Customer Data, as applicable. You will ensure that your Input and use of the Notion AI will not violate any applicable law. You are solely responsible for the development, content, operation, maintenance, and use of your Content and Customer Data.
What does it mean for Notion to process our input (customer data) to help its AI? How safe is this? What do you think of it? Would you use it given how these terms are coined?
I continued reading the Data Processing Addendum[3] and also noticed the following paragraph in the Data Use and Processing section:
> The parties acknowledge and agree that Customer is the Controller of Customer Personal Data and Notion is the Processor of such Customer Personal Data. Notion shall Process Customer Personal Data as a service provider strictly for the business purpose(s) agreed between the parties and as provided under the Agreement, this DPA, and any instructions expressly agreed upon by the parties in writing (together, the "Business Purpose").
How do you think Notion processes Customer Personal Data for its "Business Purpose"? I couldn't find any detailed explanation of the "Business Purpose" in the Master Subscription Agreement[2] or Personal Use Terms of Service[4] or Data Processing Addendum[3].
[1] https://www.notion.so/Notion-AI-Program-Terms-c0066e3003904176bb50b9f7c16164b9
[2] https://www.notion.so/Master-Subscription-Agreement-4e1c5dd3e3de45dfa4a8ed60f1a43da0#ab40a767dcd04b10b58512a964b928f0
[3] https://www.notion.so/Data-Processing-Addendum-361b540101274b1fa7e16b90402b0d99#cfce81e82e31431d9a2cfe87699f7710
[4] https://www.notion.so/Personal-Use-Terms-of-Service-00e4e5d0f2b9411cbee6493f15779500#4c8b3847a1874ce7abcef66829ca71e4
PS: anyone else finds it quite difficult to read terms of use and agreements like this? The legal-speak is sometimes quite difficult to decode/find the meaning between the lines.
