# Time-2-Notion Privacy Policy Draft

_Last updated: release candidate draft_

Time-2-Notion is a Chrome extension for tracking time and saving approved time entries to a Notion workspace that you authorize.

## Data the extension stores locally

Time-2-Notion stores setup and timer data in Chrome extension local storage on your device, including:

- Notion public connection client ID and OAuth relay URL that you enter during beta setup;
- selected Notion data source IDs and field mappings;
- cached project/product, task, and data source names/IDs used to populate selectors;
- active timer state, pending time-entry review data, and recently entered elapsed time;
- Notion OAuth access and refresh tokens returned after you authorize the extension.

Setup backup export files include setup values, selected data sources, field mappings, and cached lists. Backup files do **not** include Notion OAuth tokens.

## Data sent to Notion

After you click **Save to Notion**, the extension sends the time-entry fields you reviewed to the Notion API, such as title, description, task relation, optional project relation, start/end timestamps, actual minutes, rounded minutes, and rounding delta. The extension also reads shared Notion data source metadata and project/task records needed for setup and selector lists.

## OAuth relay behavior

The beta uses an OAuth relay so the extension does not include a Notion client secret. During connection and token refresh, the relay receives authorization codes or refresh tokens and exchanges them with Notion. The relay should not log secrets or token payloads and should only return the token response required by the extension. Use a relay deployment you control or a first-party production relay before public launch.

## What is not collected

Time-2-Notion does not intentionally collect browsing history, page contents from websites you visit, keystrokes outside the extension UI, payment card data, or analytics events. It does not sell personal data.

## Permissions summary

- `identity`: opens the Notion OAuth authorization flow and receives the extension redirect.
- `storage`: saves local setup, tokens, timer state, and backup-friendly cached setup data.
- `https://api.notion.com/*`: reads and writes the Notion workspace resources you authorize.
- Configurable relay host access: contacts the OAuth relay URL you enter during beta setup. The production build should narrow this to a first-party relay where possible.

## User control and deletion

You can disconnect Notion from the options page to remove authorization and clear timer/project state from the extension. You can also remove all extension data by uninstalling the extension from Chrome. To revoke Notion access, remove the Time-2-Notion connection from your Notion workspace settings.

## Contact

Replace this section with the production support email or support page URL before publishing the Chrome Web Store listing.