Privacy Policy

What we collect

• Your account: your email address, your name if you add one, and your preferred language. The sign-in provider stores your password in a form nobody can read. If you sign in with Google, Google shares your email address with us.
• Workspace content: workflows and their versions, companies with their departments, roles and agents, knowledge base documents, agent conversations and lessons, and the answers that arrive through public forms.
• Run data: what went into each step and what came out, approvals and their decisions, and the workspace's activity log.
• AI requests: the text that AI steps and agents send to the chosen AI provider. For each request we record the model, the size of the text and its estimated cost.
• Keys you save, such as an AI provider key or a connected account's sign-in details: they are stored encrypted and never shown to anyone after saving.
• In your browser: your language choice in a cookie, and your sign-in session and theme in the browser's storage.
• Demo requests: if you send the form on the demo page, we keep your name, the way to reach you that you wrote, your type of business, your country, your preferred time, your message and your language, with no account needed. We use them only to contact you, and delete them when you ask or 90 days after your request arrived if no pilot started.
• Your device's internet address: used to limit repeated requests to public links, and kept for a short time in a form nobody can read.

Why we use it

• To sign you in and protect your account.
• To run your workflows and agents and show the results to you and your team.
• To show AI costs and apply the monthly limit.
• To protect the service from misuse and find the cause of errors. Error logs contain no passwords or keys, and you see a reference number instead of the details.

Where your data is processed

Your data is kept private on secured cloud servers and is never sold or shared. When you connect another service yourself, it receives only the data your workflows send to it.

Who can see it

Members of your workspace, each according to their role: owner, admin, editor or viewer. Saved keys are never shown to any member after saving.

How long we keep it, and deleting it

• We keep your data while your account exists.
• Finished runs are deleted automatically after the period a workspace admin sets (90 days unless changed).
• A workspace owner can download a copy of its data in Admin → Data export. The copy never contains keys or passwords, nor the data that passed through runs.
• You can delete your account in Account & security, or contact us to request deletion. Every workspace where you are the only member is deleted with it, with all its data. If you are the only owner of a workspace that has other members, hand ownership to another member first.

Your rights

You may ask to see, correct or delete your data, or to get a copy of it, and you may object to how it is used. You can do most of this yourself in the app, or request deletion or correction by contacting us and we will respond within 30 days upon verifying your identity.

Egypt's Personal Data Protection Law (Law No. 151 of 2020) gives you these rights, and the law of your own country may give you more.

Keeping data safe

We encrypt saved keys, ask for two-step verification before sensitive actions for people who turned it on, and record important actions in an activity log that can't be edited. If your data is put at risk, we will tell you as the law requires.

Changes to this policy

We may change this policy; when we do, we update the “Last updated” date at the top of this page.