Privacy Policy

What we collect

On this marketing site (workflowradar.io), we collect the email address you submit through any contact form (e.g. the enterprise inquiry form, the monitoring checklist download). We also use Google Analytics 4 to understand which pages get visited and which CTAs convert. Google Analytics sets cookies in your browser, processes your IP address for geographic insights (anonymized before storage), and records pageviews and event interactions. You can opt out by installing the Google Analytics opt-out browser add-on or by enabling Do Not Track in your browser. We also load a visitor-identification pixel from Leadsy.ai (Instantly) on the marketing site to attribute returning visits. We do not use Google Ads, retargeting pixels, or remarketing tags.

In the WorkflowRadar app (app.workflowradar.io), once you sign in, we collect: your email, your organization name, the n8n base URLs and API keys you connect (API keys are encrypted at rest with AES-256-GCM), and the workflow metadata pulled from your n8n instances. We do not collect data flowing through your workflows.

When you subscribe to a paid plan, Paddle (our merchant of record) collects your name, billing address, and payment-card details directly through their checkout. We never see your full card number.

How we use it

Email addresses collected via marketing-site forms are used to respond to your inquiry, deliver the resource you requested, and send occasional product updates. We do not sell, share, or use them for advertising. You can unsubscribe with one click from any email we send.

App data is used to render your dashboards, fire your alerts, and generate reports for you. We do not share it with third parties for marketing or advertising.

Paddle receives the information needed to charge your subscription and handle tax compliance. Paddle does not have access to your n8n workflow data.

Subprocessors

• Supabase (Postgres + Auth) — primary data store
• Vercel — hosting
• Resend — transactional email delivery
• Anthropic — AI summaries and diagnoses (only structured metadata, never your workflow inputs)
• Paddle.com Inc. — payment processing, billing, tax compliance, and merchant-of-record services. See Paddle's privacy policy.
• Google Analytics 4 — marketing-site analytics (cookies + IP-based geo)
• Leadsy.ai (Instantly) — anonymized visitor identification on the marketing site. Not loaded inside the app.

Data retention

Account data lives as long as your account is active. After you request deletion, we erase it within 30 days, except records we must retain for tax, billing, or legal compliance (typically up to 7 years).

Your rights (GDPR, UK GDPR, CCPA)

If you're in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, rectify, erase, port, object to, or restrict the processing of your personal data. If you're in California, you have the right to know what personal information we hold, request deletion, and opt out of any sale or sharing — though we don't sell your personal information.

Email hello@workflowradar.io to exercise any of these rights. We respond within 30 days. A Data Processing Agreement (DPA) is available on request for EU and UK customers.

International transfers

If you're in the EU, UK, or Switzerland, your data is transferred to and stored in the United States. We rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable to safeguard those transfers.

Children's privacy

WorkflowRadar isn't intended for users under 16. We don't knowingly collect personal data from children. If you believe a child has provided us data, email us and we'll delete it.

Related policies

See our Terms of Service for billing terms and our Refund Policy for how cancellations and refunds work.

Contact

Questions? hello@workflowradar.io.