Privacy Policy
Version 2026-06-25 · Effective 25 June 2026
This policy explains how Matthias Frank ("we") handles personal data when you use Yanta Audit ("the Service"). It covers the data we collect about you — the person connecting a workspace — for which we are the controller. The structural data inside your workspace is processed on your behalf under our Data Processing Addendum, where you (or your organisation) are the controller and we are the processor.
Who we are
Controller: Matthias Frank, a sole proprietorship based in Berlin, Germany. Full legal and postal details are in our Impressum at matthiasfrank.de. You can reach us about privacy at hello@matthiasfrank.de. We have not appointed a Data Protection Officer, as we are below the thresholds that require one.
What we collect and why
| Data | Why we process it | Legal basis |
|---|---|---|
| Your Notion account name, email address, and avatar | To create your account, let you return to your dashboard, and follow up with you about your workspace and our consulting services | Your consent (Art. 6(1)(a) GDPR); for providing the Service also Art. 6(1)(b) |
| Your workspace’s structural schema (database, property, option, and relation metadata) | To produce and serve your audit report | Processed on your behalf as processor — see the DPA |
| Your IP address at the moment you consent | To evidence that consent was given, when, and from where | Our legitimate interest in demonstrating compliance (Art. 6(1)(f)) |
| Strictly necessary cookies | To keep you signed in and to show one-time messages | Our legitimate interest in operating the Service (Art. 6(1)(f)); no consent banner is required for these |
We do not keep or display the content of your Notion pages, and we do not use tracking, advertising, or analytics cookies. We are Notion consultants, not data traders — we never sell your data or share it for anyone else’s marketing.
Structure, never content
The audit integration is read-only — it holds only Notion’s "Read content" and "Read user information" capabilities, so it can never change your workspace. We use it to read the shape of your workspace: the names and types of your databases, properties, options, and relations. To find databases nested inside pages, the scan may pass over page blocks, but we store and report only that structure — we do not keep, display, or use the text inside your pages.
Cookies
All cookies we set are strictly necessary for the Service to work. None track you across sites or build a profile, so under the German TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz) no cookie-consent banner is required.
| Cookie | Purpose | Lifetime |
|---|---|---|
| audit_oauth_state | Secures the connection handshake against cross-site request forgery and carries the document versions you accepted across it (encrypted) | Up to 10 minutes |
| yanta_session | Keeps you signed in to your dashboard (encrypted) | Up to 30 days |
| yanta_embed_flash | Hands your embed link to the dashboard once after you connect (encrypted) | Up to 1 hour |
| yanta_ws_limit_flash | Shows the one-workspace notice once | Up to 5 minutes |
| yanta_disconnected | Shows the disconnect confirmation once | Up to 1 minute |
Where your data is hosted
We host and process your data in the European Union (Frankfurt, Germany): our application runs on Netlify in the Frankfurt region and our database runs on Neon in the Frankfurt region. We rely on a small number of sub-processors to run the Service; the current list is in our Data Processing Addendum.
International transfers
Your data is stored and processed on EU soil. Some of our infrastructure providers are US-incorporated companies, so a transfer to, or access from, outside the EU cannot be entirely excluded. Where that is the case, we rely on the European Commission’s Standard Contractual Clauses as the safeguard for the transfer. Your Notion workspace is, of course, hosted by Notion (a US company) — that is your own existing relationship with Notion, and we only read from it.
How long we keep it
| Data | Retention |
|---|---|
| Your workspace’s harvested schema | While a legal basis remains (your active connection, or a client relationship); deleted once none remains |
| Your account and identity (name, email, avatar) | While your account exists; erased when you disconnect and delete |
| Consent records | Kept with your account; the document versions you accepted survive in the erasure record below |
| Dormant accounts (no sign-in and no active connection) | Periodically reviewed and removed after around 24 months |
| Erasure record (a one-way hash of your email, the document versions you accepted, and the relevant dates) | Periodically reviewed and removed; kept for up to around 3 years to evidence that consent was given and honoured and to avoid contacting you again |
Deleting your data
You can erase everything yourself: "Disconnect & delete my data" in your dashboard revokes our access to your Notion workspace, deletes your account, and removes your harvested data (unless another legal basis, such as a separate client relationship, still requires it). We keep only the minimal erasure record described above — never your name, email in the clear, avatar, or any page data — so we can prove the erasure happened and avoid re-contacting you.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you, and receive a copy;
- have inaccurate data corrected, and incomplete data completed;
- have your data erased (you can do this yourself at any time);
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing done before withdrawal; and
- lodge a complaint with a data-protection supervisory authority — for us, the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
To exercise any of these rights, contact us at hello@matthiasfrank.de.
How we protect your data
- your Notion authorisation token is encrypted at rest;
- your account session is encrypted with a separate key, kept distinct from every other credential we hold;
- all traffic is served over TLS; and
- the audit integration is least-privilege and read-only, so it can never change your workspace, and we extract and retain only its structure.
Changes to this policy
We may update this policy. Each version carries a version date, and the version you accepted is recorded with your consent. Where changes are material, we will ask you to accept the new version before you continue.
Contact
Privacy questions or requests: hello@matthiasfrank.de. Full legal details: our Impressum at matthiasfrank.de.