Privacy Policy

RunFlowPilot (“we”) provides an AI-assisted builder that drafts n8n workflows you deploy. For anything privacy-related — access, correction, or deletion requests — write to admin@runflowpilot.com.

What we collect and why

• Account. Email address, display name, and authentication identifiers, handled by Firebase Authentication. Why: to sign you in, identify your data, and enforce trial and subscription access.
• Plan, trial, and credits ledger. Plan, trial start/end, credit balance, allowances, reservations, and usage events. Why: to grant trials, reset allowances each billing period, and prevent double-spending.
• n8n connections. Your included n8n account details, plus any instance names, URLs, verification metadata, and n8n API keys you connect — encrypted before storage and never displayed again. Why: to verify, deploy to, and read back from n8n on your behalf.
• Your content. Conversations, chat messages, workflow drafts, plans, deployment records and attempts. Why: to generate, store, validate, and deploy your workflows.
• AI processing inputs. The prompts and workflow context you submit for generation, sent to Google's Gemini API. Why: that API call is the generation feature.
• Payments. Email and subscription records for checkout and payment notifications, processed through WarriorPlus. Why: to sell and manage paid plans.
• Support messages. Whatever you send to our support address. Why: to answer you. Support messages are email only — the app stores no separate support tickets.

Who processes data

• Google (Firebase Authentication + Firestore) — identity and stored data hosting.
• Cloudflare (Workers + Pages) — hosting and background generation processing. Requests pass through Cloudflare infrastructure.
• Google Gemini API — receives your generation prompts and workflow context to produce drafts.
• WarriorPlus — receives checkout and subscription data to process payments and billing.
• Your n8n — receives the workflows you choose to deploy.
• Landing-page embeds — the sales page loads fonts, the walkthrough video player, checkout buttons, and images from their providers (Google, YouTube, WarriorPlus, and our image host). Standard request data, such as IP address and browser type, is visible to those providers when the page loads.

We set no advertising or analytics cookies ourselves, and we do not sell data. Embedded players and buttons apply their own providers' policies once you interact with them.

Cookies and device storage

Sign-in sessions are kept by Firebase Authentication in your browser's local device storage; clearing site data signs you out.

How long data is kept

Account data is kept while your account is active. Credit balances reset to the plan allowance each billing period (unused credits do not roll over). Deleting your account removes your profile, n8n connections, drafts, credits data, tokens, and stored credentials, and erases stored secrets. No retention timetable beyond this is defined.

Security

n8n API keys are encrypted before storage and never returned to the browser; connection checks run server-side; per-user data access is scoped by database rules; deployments land inactive until you switch them on. No system is perfectly secure — if you suspect a problem, tell us immediately at admin@runflowpilot.com.

Your choices

• Review and edit your profile, instances, and drafts at any time in the app.
• Cancel paid plans from the in-app upgrade page and your WarriorPlus account; access runs to period end.
• Ask us at admin@runflowpilot.com for access, correction, or deletion help.

Related: Refund Policy · Support · Terms of Service