Privacy Policy

1. Introduction

Welcome to workflow-config ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in with Google, we collect your name, email address, and profile picture from your Google account.
• Workflow Data: Workflows, agents, and documents you create within our application.
• User Preferences: Settings and configurations you choose within the application.

2.2 Automatically Collected Information

• Usage Data: How you interact with our service, including features used and actions taken.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Log Data: Server logs, error reports, and performance data.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve workflow-config.
• Authentication: To verify your identity and manage your account.
• Data Storage: To save your workflows and preferences.
• Communication: To send service-related notifications and updates.
• Analytics: To understand usage patterns and improve our service.
• Security: To detect, prevent, and address technical issues and fraudulent activity.

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored securely using Supabase, a cloud-based database service. We use industry-standard encryption and security measures to protect your information.

4.2 Security Measures

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication via Google OAuth 2.0
• Regular security audits and updates
• Access controls and authentication requirements
• Automated backups for data recovery

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services (e.g., Supabase, OpenAI) that help us operate our service.
• Legal Requirements: When required by law or to protect our rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: When you explicitly authorize us to share your data.

6. Third-Party Services

6.1 Google Authentication

We use Google OAuth for authentication. Please review Google's Privacy Policy for information on how Google handles your data.

6.2 OpenAI API

Our AI-powered workflow generation features use OpenAI's API. Workflow descriptions you provide may be processed by OpenAI. Review OpenAI's Privacy Policy for details.

6.3 Supabase

We use Supabase for database and authentication services. Review Supabase's Privacy Policy for information on their data practices.

7. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your account and associated data.
• Export: Download your workflow data at any time.
• Opt-Out: Unsubscribe from marketing communications.

To exercise these rights, please contact us at the email address provided below.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

9. Children's Privacy

Our service is not intended for users under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us: