Privacy Policy
Last updated: [Effective date]
The short version:
- We collect what we need to run your account: your name, company, email address and billing details.
- Workflow payloads pass through our hub to your private n8n. We do not store payload contents in our database. Results and large payloads are held briefly in a cache, then deleted.
- We do not sell your information or use advertising trackers.
This Privacy Policy explains how [Legal entity name] ("nodeflex.io", "we", "us") handles information when you visit www.nodeflex.io, use the customer portal at portal.nodeflex.io, or send requests through hub.nodeflex.io (together, the "Service").
1. Information we collect
Information you give us
- Account details: your name, company name, email address, and your nodeflex.io network path. If you provide them, we also store a phone number and postal address.
- Billing details: plan, subscription status, invoices and payment status. Card details are entered with our payment processor and never reach our servers.
- Support messages: anything you send us when you contact us.
Information created when you use the Service
- Sign-in codes: one-time codes we email you to verify your address and sign you in. They expire shortly after they are issued.
- API keys: the name, identifier and status of each key. Key values are stored encrypted.
- Activation records: for each request relayed through the hub, we record metadata: a correlation ID, the workflow path, timestamps, duration, payload and response sizes, status, and any error message.
- Technical data: like most online services, our servers process IP addresses and request details to deliver and secure the Service.
Workflow payloads
When a cloud app calls one of your private workflows, the request payload is relayed to your n8n over its connection to our hub. We do not write payload contents to our database. Two short-lived exceptions:
- Results returned by your workflow are cached for up to 30 minutes so the caller can collect them. They are deleted within seconds of being collected.
- Large payloads uploaded to our storage endpoint are held for up to 30 minutes, and deleted within seconds of being downloaded.
You control what your workflows send and receive. Please don't route data through the Service that you are not permitted to share with a processor.
2. How we use information
- To provide the Service: creating your account, relaying requests and returning results.
- To authenticate you and your API keys, and to enforce plan limits.
- To show your usage on the portal dashboard and to bill you.
- To send service emails such as sign-in codes, verification links, billing notices and important changes.
- To keep the Service secure, investigate abuse, and fix problems.
- To comply with legal obligations.
We do not sell personal information, and we do not use it for third-party advertising.
3. How we share information
We share information only with service providers that help us run the Service, and only as they need it:
| Provider | Purpose |
|---|---|
| Microsoft Azure | Database hosting for account and activation records |
| [Hosting provider] | Servers that run the hub, cache and website |
| [Payment processor, e.g. Stripe] | Payment processing and invoices |
| [Email provider] | Delivery of sign-in codes and service emails |
| Google Fonts | Web fonts on our website and portal. Your browser requests them from Google, which receives your IP address. |
We may also disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger, acquisition or sale of assets. If that happens, we will give notice before your information becomes subject to a different privacy policy.
4. Cookies
Our marketing website does not set cookies. The portal uses only the cookies it needs to work: a sign-in cookie that keeps you logged in (it expires after a period of inactivity, and at most 12 hours after sign-in), and a security cookie that protects forms against cross-site request forgery. We do not use analytics or advertising cookies.
5. How long we keep information
- Account and billing records: while your account is open, then as long as tax and accounting law requires.
- Activation records: for the retention period of your plan, [currently 7 days].
- Cached results and stored payloads: up to 30 minutes, as described above.
- Sign-in codes: until they expire or are used.
6. Security
Your private n8n connects outbound to our hub, so your network doesn't need to accept inbound connections. Every request needs a valid API key, connections to the hub use HTTPS, and API keys are stored encrypted. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.
7. Your choices and rights
You can view and update your account details in the portal. Depending on where you live, you may also have the right to access, correct, delete or export your personal information, or to object to or restrict certain processing. To make a request, email [privacy@nodeflex.io]. We will respond within the time the law allows, and we won't treat you differently for exercising your rights.
If you are in the European Economic Area or the UK, we process your information to perform our contract with you, for our legitimate interests in running and securing the Service, and to meet legal obligations. You may also complain to your local data protection authority.
8. International transfers
We and our providers may process information in the United States and other countries. Where the law requires it, we use appropriate safeguards for these transfers, such as standard contractual clauses.
9. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we will email account owners or post a notice in the portal before the changes take effect. The date at the top shows when it last changed.
11. Contact us
[Legal entity name]
[Street address, City, State ZIP, Country]
[privacy@nodeflex.io]