Privacy Policy

1. Introduction

This Privacy Policy describes how ESSENCE Retention (“we”, “us”, “our”) collects, uses, and protects personal data in connection with the use of the ESSENCE Notion Connector (the “Service”).

We are committed to processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

2. Types of Personal Data Collected

• User Account Data: Name and email address.
• Notion Workspace Data: Data accessible through the Notion API as authorized by the user.
• Meta Ads Data: Campaign performance data, comments, and feedback retrieved via the Meta Ads API.
• Technical Data: IP address, device information, and usage-related data.

3. Categories of Data Subjects

We process personal data relating to users of the ESSENCE Notion Connector (account holders).

4. Purpose of Data Processing

• To synchronize Meta Ads reporting data into Notion workspaces.
• To provide analytics and feedback workflows.
• To maintain and improve the Service.
• To provide customer support and respond to user inquiries.

5. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

• Performance of a contract (Article 6(1)(b)) – to provide the Service.
• Legitimate interests (Article 6(1)(f)) – to improve and maintain the Service.
• Consent (Article 6(1)(a)) – where required, particularly for integrations and data access permissions.

6. Data Storage and Retention

• Data is stored using Notion and Supabase infrastructure.
• Data may also be processed via hosting providers including Vercel and DigitalOcean.
• Personal data is retained indefinitely, unless a deletion request is made.
• Users have the right to request deletion of their data at any time.

7. Sharing of Data with Third Parties

We may share personal data with the following third parties strictly as necessary to provide the Service:

• Notion API (for workspace integration).
• Meta (Facebook) Ads API (for advertising data retrieval).
• Supabase (authentication and database services).
• Vercel and DigitalOcean (hosting and infrastructure providers).

All third-party processors are required to implement appropriate safeguards for personal data.

8. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA), including in the United States.

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Transfers to providers participating in recognized data protection frameworks where applicable.

9. User Rights Under GDPR

Users have the following rights:

• Right of Access – to request a copy of their personal data.
• Right to Rectification – to correct inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”) – to request deletion of personal data.
• Right to Restrict Processing.
• Right to Data Portability.
• Right to Object to processing.

To exercise these rights, users may contact us via email at:

10. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption in transit and at rest.
• Access controls to restrict unauthorized access.
• Authentication systems managed via Supabase.
• Regular monitoring and security practices to prevent unauthorized access or disclosure.

11. Data Deletion and User Control

Users may request:

• Access to their data.
• Correction of inaccuracies.
• Deletion of their data.

Data deletion instructions are available at /data-deletion-instructions.

All requests can be made via email and will be handled in accordance with applicable data protection laws.

12. Contact Information

If you have any questions about this Privacy Policy or your personal data, please contact:

ESSENCE Retention
34 Glencairn Lawn
The Gallops, Leopardstown
Dublin 18, Ireland

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted with an updated “Effective Date.” Continued use of the Service constitutes acceptance of the updated policy.