1. Disconnect Notion in Seedling
Disconnecting one personal connection removes only that member's connection, sources, and audience contributions. An independently observed object remains only when another active connection still observes it, with access recomputed from the remaining connection.
- Sign in to the Seedling workspace. A workspace administrator must disconnect a workspace connection; the owner disconnects a personal connection.
- Open Apps or Connections, select the exact Notion connection, and choose Disconnect.
- Confirm the request. Seedling stops new synchronization, captures the exact connection and source identifiers, deletes active credentials or connection secrets, and starts a durable purge.
- Wait for the disconnect operation to report completion before reconnecting Notion.
2. Retire access in Notion
Remove the integration from the relevant Notion pages and data sources, rotate its secret, or delete the internal integration.
Also disconnect Notion in Seedling. Removing page access or invalidating the secret prevents future reads but does not independently request deletion of previously synchronized Seedling data.
3. Request deletion without workspace access
Email privacy@tryseedling.ai from a work address associated with the organization. Include the organization name, Seedling workspace name if known, the Notion account identity, and your authority to request deletion. Never include credentials, customer content, or identity documents unless Seedling provides a secure method.
Seedling verifies identity and authority before acting and will explain any information needed to locate the tenant safely.
4. What the purge removes
Disconnecting does not delete or modify the original information in Notion. Approved Seedling configuration may retain a bounded approval record, but its Notion evidence and source-derived content are removed or redacted.
- Encrypted Notion credentials or connection secrets and the tenant connection record.
- Notion sources, provider staging rows, synchronization state, and audience contributions owned by the connection.
- Notion pages, data sources, comments, nested block content, user attribution, and provider staging rows held by Seedling.
- Source objects, chunks, embeddings, identifiers, and source-linked activity, fieldwork, chat, exploration, and verification evidence owned by the integration.
5. What may remain
- Backups
- Deleted information may remain in encrypted, access-restricted backups until expiry, ordinarily within 35 days after active-system deletion. It is deleted again if a backup is restored for disaster recovery.
- Lifecycle audit
- Seedling may retain workspace and connection identifiers, action, outcome, bounded reason codes, and timestamps needed to demonstrate deletion and protect the Service. These records contain no Notion credentials or native payloads.
- Legal and security records
- Limited records may be retained longer when required for security, fraud prevention, disputes, accounting, or law.
6. Confirmation and related guidance
Seedling will confirm receipt of an emailed deletion request and provide a completion or decision notice after verification and processing. Questions may be sent to privacy@tryseedling.ai; product troubleshooting may be sent to support@tryseedling.ai.