Introduction
NeuraFlow ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI workflow automation platform, website, and related services.
Information We Collect
We collect information you provide directly, including your name, email address, company name, and payment information when you create an account. We also collect usage data such as workflow configurations, execution logs, feature usage patterns, and performance metrics to improve our services.
How We Use Your Information
We use collected information to provide and maintain our services, process transactions, send communications about your account, improve our platform through aggregated analytics, comply with legal obligations, and prevent fraud and abuse.
Data Storage and Security
All data is encrypted at rest using AES-256 and in transit using TLS 1.3. We store data in SOC 2 certified data centers with multi-region redundancy. Workflow execution data is retained according to your plan's history limits (7 days for Starter, 90 days for Professional, unlimited for Enterprise).
Third-Party Services
When you connect integrations, we access third-party services on your behalf using the permissions you grant. We do not sell your data to third parties. We use industry-standard sub-processors for payment processing (Stripe), email delivery (SendGrid), and infrastructure (AWS, Vercel).
Cookies and Tracking
We use essential cookies for authentication and session management. We use analytics cookies to understand how users interact with our platform. You can disable non-essential cookies through your browser settings or our cookie preferences panel.
Your Rights
You have the right to access, correct, or delete your personal data at any time. You can export all your data from Settings > Data Export. For GDPR-specific requests including right to erasure and data portability, contact our Data Protection Officer at privacy@neuraflow.io.
Data Retention
We retain your account data for as long as your account is active. After account deletion, we remove personal data within 30 days and anonymized analytics within 90 days. Billing records are retained for 7 years as required by law.
Children's Privacy
NeuraFlow is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete that information promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform at least 30 days before the changes take effect.
Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at privacy@neuraflow.io or write to NeuraFlow Privacy Team, 548 Market Street, Suite 35425, San Francisco, CA 94104.