Privacy Policy

Last updated: May 30, 2026

This Privacy Policy describes how DataFlows collects, uses, and shares information when you use our platform — including the workflow canvas, Applet builder, and published Applet REST APIs. By using DataFlows you agree to the practices described here.

1. Information We Collect

Account information. When you create an account we collect your full name and email address. If you participate in a paid tier we will also collect billing information, which is processed by our payment processor.

Usage data. We collect information about how you interact with the service — including which Workflows you build, Node execution logs, Applet call counts, and error traces — to operate and improve the platform.

Cookies & session data. We set an HttpOnly session cookie when you sign in. This cookie is required for authentication and cannot be read by client-side scripts. We do not use third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to:

• Operate the DataFlows platform — authenticate you, persist your Projects and Workflows, and execute Applet APIs on your behalf.
• Detect and prevent fraud, abuse, and security incidents.
• Improve features — understanding aggregate usage patterns helps us prioritize future Node types and canvas improvements.
• Communicate service updates, including changes to pricing or these policies.

We do not use your Workflow content or Applet data to train machine learning models without your explicit consent.

3. Sharing Your Information

We do not sell your personal data. We share information only in the following circumstances:

• Service processors. Hosting providers, cloud infrastructure, and analytics tools that process data on our behalf under data processing agreements.
• Legal requirements. When required by law, court order, or to protect the rights and safety of DataFlows or others.
• Business transfers. In the event of a merger or acquisition, your data may be transferred as part of that transaction, with advance notice to you.

4. Cookies

DataFlows currently sets one cookie: an HttpOnly, Secure session cookie used exclusively for authentication. It expires when you sign out or after a rolling inactivity period.

If we introduce optional analytics cookies in the future, we will request your explicit consent before setting them, and you will be able to withdraw that consent at any time.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate information in your account.
• Delete your account and the personal data associated with it.
• Export your Workflow and Project data in a machine-readable format.

To exercise any of these rights, email privacy@dataflows.example. We will respond within 30 days.

6. Data Retention

We retain your account data and Workflow content for as long as your account is active. When you delete your account, your personal data and associated Projects, Workflows, and Applets are permanently deleted within 30 days. Aggregate, anonymized usage statistics may be retained indefinitely.

7. Children's Privacy

DataFlows is not directed at children under 16 (or 13, depending on your jurisdiction). We do not knowingly collect personal data from minors. If we become aware that a minor has registered, we will delete that account and its associated data promptly.

8. International Data Transfers

DataFlows infrastructure is currently hosted in the European Union. If your data is transferred to or processed in a country outside your jurisdiction, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — before any transfer occurs.

9. Contact

Questions or concerns about this Privacy Policy? Contact our privacy team at privacy@dataflows.example.