1. Introduction
Welcome to NodeStorm, a workflow automation platform that helps you build and run automated workflows. Your privacy is important to us. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
By using NodeStorm, you agree to the collection and use of information in accordance with this policy.
2. Data We Collect
We collect the following types of information:
- Account Information: Email address, display name, and profile picture when you create an account.
- Authentication Data: If you sign in with a third-party provider (such as Google), we receive your email, name, and profile picture from that provider.
- Workflow Data: The workflows you create, including nodes, connections, and configurations.
- Execution Data: Records of workflow runs, including timestamps, results, and any errors encountered.
- Usage Metrics: Information about how you use the platform, including AI token usage, emails sent through workflows, and workflow execution counts.
- Navigation Data: Which pages, links, and buttons you click within NodeStorm (the page you were on, the destination, and the control's label), tied to your account when signed in or to a random browser identifier otherwise. We do not record what you type, your IP address, or your browser details, and we honor the Do Not Track setting.
- Assistant Profile: A short, AI-written profile of you (what you work on, how you like answers) generated periodically from your own chats, file names, and workflow names. See section 3 for how it is used and controlled.
- Integration Tokens: When you connect third-party services (such as Google Drive), we store encrypted OAuth tokens to maintain your connection.
- Files: Files you upload to the platform (maximum 10MB per file).
- Payment Information: We use third-party payment processors to handle payments. We store only a customer identifier; your payment card details are never stored on our servers.
3. How We Use Your Data
We use your data for the following purposes:
- To provide and maintain the NodeStorm service
- To process payments and manage your subscription
- To send transactional emails (account confirmation, password resets, payment receipts)
- To improve the platform and develop new features
- To personalize the assistant: we periodically generate a short profile of you (what you work on, how you like answers) from your own chats, file names, and workflow names. It is stored with your account, shown to you under Settings > Memory where you can edit, clear, or switch it off, is never shared with other users, and is deleted with your account.
- To detect and prevent security threats, fraud, and abuse
- To calculate usage for billing purposes
4. Third-Party Services
We work with trusted third-party service providers to operate our platform:
- Payment Processors: Handle subscription billing and payment processing. Your payment details are handled directly by these processors and are never stored on our servers.
- Email Delivery Services: Send transactional emails on our behalf.
- Cloud Hosting Providers: Host our application and store your data securely.
- AI/LLM Providers: Process prompts and generate responses for workflow nodes that use AI. Data sent to these providers is subject to their respective privacy policies.
- Content Delivery and Security Services: Protect our platform from attacks and deliver content efficiently.
- Error Monitoring Services: Help us identify and fix technical issues. These services do not receive personally identifiable information.
We do not sell or rent your personal information to third parties.
5. Data Security
We implement industry-standard security measures to protect your data:
- All data is transmitted over HTTPS (TLS 1.2 or higher)
- Sensitive data such as API credentials and OAuth tokens are encrypted at rest
- Passwords are hashed using industry-standard algorithms
- Rate limiting and DDoS protection are in place to prevent abuse
- Access controls ensure you can only access your own data
While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your data for as long as necessary to provide our services:
- Account Data: Retained until you delete your account
- Workflow Data: Retained until you delete the workflow or your account
- Execution History: Retained for 90 days
- Usage Metrics: Retained for 1 year for billing and analytics purposes
- Navigation Data: Retained for 90 days
- Assistant Profile: Retained until you clear it or delete your account
- Payment Records: Retained for 7 years as required by law
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to Access: Request a copy of the data we hold about you
- Right to Deletion: Delete your account and all associated data yourself from the Account page, or ask us to
- Right to Portability: Export your workflows and data
- Right to Rectification: Update or correct your personal information
- Right to Object: Disconnect third-party integrations at any time
To exercise these rights, contact us at support@nodestorm.ai. We will respond within 30 days.
8. Third-Party Integrations
When you connect third-party services to NodeStorm (such as Google Drive):
- We store encrypted OAuth tokens to maintain your connection
- We only access data that you explicitly authorize through the OAuth consent screen
- You can disconnect integrations at any time from your account settings
- Disconnecting an integration immediately revokes our access and deletes stored tokens
9. Cookies and Tracking
We use essential cookies to maintain your login session. We do not use third-party tracking cookies or advertising cookies.
10. Children's Privacy
NodeStorm is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. International Data Transfers
Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data during international transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of NodeStorm after changes take effect constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at support@nodestorm.ai.