Privacy Policy & Data Protection

Last Updated: 10/9/2026

We prioritize your privacy and data security above all else. This Privacy Policy details how we collect, process, store, and protect your information when accessing our website, automation platforms, API integrations (Google APIs, Meta / Facebook / Instagram / WhatsApp APIs, TikTok API, Snapchat API, X / Twitter API, LinkedIn API), Webhook processors, and AI workflow tools.

1. Information We Collect & Process in Automations

To deliver efficient automation and integration services, we process the following data categories strictly based on triggers and workflows configured by you:

• Account & Identity Data: Name, email address, phone number, and unique user identifiers.
• OAuth Credentials & Connected APIs: OAuth tokens and authorized API scopes required to connect Google, Meta, WhatsApp, TikTok, Snapchat, X (Twitter), LinkedIn, and external CRMs.
• Automation Payloads & Execution Logs: Data fields transmitted through Webhooks, automated workflow steps, and execution operational logs (timestamps, status codes, and execution latency).

2. Google User Data Usage & Limited Use Policy

Our platform adheres to the highest level of strictness regarding data obtained through Google APIs:

• Google user data is utilized strictly and exclusively to execute core application features and user-configured automation workflows.
• We never sell, rent, or utilize Google user data for advertising, targeted marketing, or training generalized AI models without consent.
• We do not transfer Google user data to third parties unless strictly necessary to provide or improve direct automation functionality specified by the user.

3. Sensitive Data Protection & Security Mechanisms

We deploy enterprise-grade security infrastructure to safeguard your sensitive data and API credentials both in transit and at rest:

• In-transit Encryption: All data transmitted between user clients, application servers, Webhook endpoints, and external APIs is fully encrypted using modern HTTPS and TLS 1.2 / TLS 1.3 protocols.
• At-rest Encryption: Sensitive user data, database stores, API keys, and OAuth access tokens are encrypted at rest utilizing high-grade AES-256 encryption standards.
• Secure API Key Vaults & Isolation: OAuth tokens and integration credentials are stored in isolated encrypted vaults with automated refresh token rotation mechanisms.
• Strict Access Control (RBAC): Access to internal infrastructure is strictly restricted to authorized systems via Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA).

4. AI & Automated Data Processing Policy

When utilizing AI-driven automation components (such as text analytics or automated response generators), data is processed transiently to execute specified tasks. We do not use your private workflow payloads, user messages, or sensitive content to train public AI models.

5. Data Retention, Deletion & OAuth Revocation

We retain automation logs and system metrics only for the proportionate operational timeframe needed for auditability. You maintain the right to:

• Delete any automated scenario or clear execution log history via the dashboard.
• Revoke connected OAuth app permissions for Google, Meta, TikTok, Snapchat, X (Twitter), or LinkedIn platforms at any time via your account settings.
• Submit a formal request for complete data wiping across all database clusters by contacting support.

6. How to Submit a Data Deletion Request

To request permanent deletion of your account, API tokens, or automation execution history, please submit a deletion request via our "Contact Us" page or support email. Requests are processed promptly with formal confirmation provided once data is purged from active databases and backups.

7. Contact & Data Protection Officer

For any questions or inquiries regarding our Privacy Policy, data encryption mechanisms, or API compliance, please contact us anytime through our "Contact Us" page.