1. Information We Collect
- Account information: Email address, name (when you sign up)
- Payment information: Processed by Stripe — we never store your card details
- Conversation data: Messages exchanged with our AI agent during workflow creation
- Credentials you provide: API keys, tokens, passwords for third-party services that your workflow needs to connect to
2. How We Use Your Credentials
Important: Please Read Carefully
When you provide API keys, tokens, or other credentials during the AI conversation, these are stored in our managed N8N instance so your workflow can connect to external services.
- Credentials are encrypted at rest using N8N's built-in encryption
- Credentials are used only to execute your workflow — never shared, sold, or used for any other purpose
- We do not have a way to view your decrypted credentials — they are managed by N8N's credential system
- If you want your credentials deleted, contact us and we will remove the associated N8N credentials
3. Credential Security Recommendations
- Use dedicated API keys for FlowBuild — do not reuse keys used elsewhere
- Use minimum-permission keys — only grant the access your workflow needs
- For services that support it, create app-specific passwords instead of using your main password
- You can revoke your keys at any time from the third-party service if you no longer want the workflow running
4. Data Storage & Security
- Account data and conversation history are stored in Supabase (PostgreSQL) with row-level security
- All data transmission uses HTTPS/TLS encryption
- Payment processing is handled entirely by Stripe — PCI DSS compliant
- We do not sell, rent, or share your personal data with third parties
5. Third-Party Services
FlowBuild integrates with the following third-party services:
- Supabase: Database and authentication
- Stripe: Payment processing
- OpenAI: AI conversation processing (your messages are sent to OpenAI's API)
- N8N: Workflow execution engine
Each service has its own privacy policy. By using FlowBuild, your data may be processed by these services.
6. Data Retention & Deletion
- Account data is retained as long as your account is active
- You can request full data deletion by contacting us
- Upon deletion: account, conversations, workflows, and credentials are permanently removed