Privacy Policy
NodaFlow ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our platform and website at nodaflow.com (the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information: When you register, we collect your name, work email address, company name, and password (stored as a secure hash).
Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, workflow configurations, and execution logs.
Technical Data: We collect your IP address, browser type, operating system, and device identifiers for security and performance purposes.
Third-Party Credentials: If you connect external APIs (e.g., Slack, Gmail, HubSpot), your API keys and access tokens are stored encrypted in our secure vault. We never log or expose these credentials.
Communications: If you contact us via the contact form or email, we retain the content of your messages.
2. How We Use Your Information
- To provide, maintain, and improve the Service
- To authenticate and manage your account
- To execute your AI agent workflows on your behalf
- To send essential service communications (e.g., billing, security alerts)
- To respond to your inquiries and support requests
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
3. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share data with:
- Service Providers: Trusted third-party vendors who assist in operating our infrastructure (e.g., cloud hosting, database, email delivery). These providers are bound by confidentiality agreements.
- AI Model Providers: Inputs you send to AI nodes in your workflows (e.g., prompts) are transmitted to the model provider you select (OpenAI, Anthropic, Google). This is governed by each provider's own privacy policy.
- Legal Authorities: If required by law, regulation, or valid legal process.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction.
4. Data Retention
We retain your account information for as long as your account is active. Workflow execution logs are retained for 90 days by default. You may request deletion of your data at any time by contacting admin@nodaflow.com. We will process deletion requests within 30 days.
5. Security
We implement commercially reasonable technical and organizational measures to protect your data, including TLS encryption in transit, AES-256 encryption at rest for credentials, and access control policies. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights under GDPR:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
- Right to Restriction: Request that we limit the processing of your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing of your data in certain circumstances.
To exercise any of these rights, contact us at admin@nodaflow.com.
7. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising cookies. See our Cookie Policy for details.
8. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
NodaFlow
Email: admin@nodaflow.com
Website: nodaflow.com