Privacy Policy

Introduction

At Autumn8.tech ("we", "us", or "our"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our n8n automation services and workflow solutions.

By engaging our services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using our services:

• Contact Information: Name, email address, phone number, company name
• Account Credentials: Login credentials for your n8n instance and related services
• API Keys and Tokens: Third-party service credentials required for workflow automation
• Workflow Data: Data processed through your automated workflows, including business data, customer information, and system interactions
• Communication Data: Messages, feedback, and support requests you send to us

1.2 Information Automatically Collected

• Usage Data: Workflow execution logs, performance metrics, error reports
• Technical Data: IP addresses, browser type, device information, server logs
• Analytics Data: Website usage patterns and service interaction data

2. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To create, configure, manage, and execute your n8n workflows and automations
• Infrastructure Management: To host and maintain your n8n instance on our secure servers
• Technical Support: To provide customer support, troubleshoot issues, and optimize workflow performance
• Security: To protect your data, monitor for security threats, and ensure secure credential management
• Service Improvement: To analyze usage patterns and enhance our service offerings
• Communication: To send service updates, technical notifications, and respond to inquiries
• Legal Compliance: To comply with legal obligations and enforce our terms of service

3. Data Storage and Security

3.1 Data Storage

Your data is stored on secure servers maintained by us or trusted third-party cloud providers. Each client's n8n instance and data are isolated in dedicated environments to prevent unauthorized access.

3.2 Security Measures

We implement industry-standard security measures:

• Encryption: Data in transit is encrypted using TLS/SSL protocols. Sensitive data at rest is encrypted using AES-256 encryption
• Access Controls: Strict access controls and authentication mechanisms to prevent unauthorized access
• Credential Isolation: API keys and credentials are stored securely using environment variables and encrypted vaults, isolated per client
• Regular Backups: Automated backups to prevent data loss
• Monitoring: 24/7 security monitoring and logging of system activities
• Regular Updates: Timely security patches and software updates

4. Data Sharing and Third Parties

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services (cloud hosting, payment processors) who assist in service delivery and are bound by confidentiality agreements
• Third-Party Integrations: With external services you explicitly authorize through your workflows (e.g., CRM, email marketing platforms, databases)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate data protection measures
• With Your Consent: Any other sharing will require your explicit consent

5. Data Retention and Deletion

5.1 Retention Period

We retain your data for as long as your account is active or as needed to provide services. Workflow execution logs and analytics data may be retained for up to 90 days for troubleshooting and optimization purposes.

5.2 Service Termination and Data Deletion

Upon termination of our agreement or at your request:

• We will provide you with a complete export of your workflows, credentials, and data within 14 days
• After successful data handover and your confirmation, we will permanently delete all your data from our systems within 30 days
• Backups containing your data will be deleted within 90 days following the retention policy
• Some data may be retained for legal or regulatory compliance purposes only

You can request immediate data deletion at any time by contacting us at vishnu@autumn8.tech.

6. Your Rights

You have the following rights regarding your personal data:

• Right to Access: Request access to your personal data and workflow information
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Restriction: Request limitation of data processing in certain circumstances
• Right to Object: Object to processing of your data for specific purposes
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us using the information provided below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your login session and preferences
• Analyze website traffic and user behavior
• Improve user experience and service performance

You can control cookie preferences through your browser settings. Note that disabling cookies may affect service functionality.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws, including GDPR for European clients.

9. Children's Privacy

Our services are intended for businesses and individuals 18 years or older. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by email or through our service. The "Last Updated" date at the top will indicate when the policy was last revised. Your continued use of our services after such modifications constitutes acceptance of the updated Privacy Policy.

11. Data Breach Notification

In the unlikely event of a data breach that affects your personal data, we will notify you within 72 hours of becoming aware of the breach, in compliance with applicable data protection laws. We will provide details about the nature of the breach, potential consequences, and measures taken to address it.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

13. GDPR Compliance (For EU Clients)

For clients in the European Union, we comply with the General Data Protection Regulation (GDPR). This includes:

• Lawful basis for processing your data (contract performance, legitimate interest, or consent)
• Data processing agreements with all third-party service providers
• Your right to lodge a complaint with a supervisory authority
• Data Protection Impact Assessments for high-risk processing activities
• Appointment of a Data Protection Officer where required