Privacy Policy – Internal Automation System

Last updated: January 1st, 2025

1. Scope and purpose

This Privacy Policy describes how PowerBoot (“we”) processes data within our internal automation system based on n8n (“System”).

The System is used only by internal systems and accounts under our control and is not available to the general public or external individuals.

2. Data processed

The System processes data that flows through configured workflows, which may include:

- Account identifiers (such as email addresses and user IDs).

- Content and metadata from connected services (for example, Google Workspace, email, files, calendar events, spreadsheets, databases), as required by specific workflows.

- Technical and log information (such as timestamps, error messages, and payload snippets) necessary for monitoring and troubleshooting.

Data is processed only for the purpose of executing the automations we configure.

3. Use of Google and other third‑party data

When connected to Google services and other third‑party APIs, the System accesses data strictly as needed for configured workflows (for example, reading or writing Google Sheets, sending emails, or managing files)

We do not:

- Sell or rent any personal data.

- Use data obtained via Google or other APIs for advertising or profiling unrelated to workflow execution.

4. Storage, retention, and access

Workflow data and logs may be stored on our infrastructure (for example, servers, databases, or storage services) to execute automations and support monitoring, debugging, and auditing.

Access to the System, its configuration, credentials, and logs is restricted to designated administrators and is not granted to external parties.

OAuth tokens and other credentials are stored in the System in a secure manner consistent with its configuration and our infrastructure controls.

Data is retained only as long as necessary to fulfill the purposes of the workflows or to comply with applicable legal or operational requirements.

5. Data sharing

Data handled by the System may be transmitted to other services that we explicitly connect (for example, messaging tools, CRMs, databases, or other internal applications) as defined in our workflows.

- We do not share data with unrelated third parties beyond:

- The service providers we intentionally integrate into workflows.

- Infrastructure or hosting providers that support the operation of our systems, subject to appropriate safeguards.

6. Security

We apply reasonable technical and organizational measures to protect data processed by the System, including:

- Restricting access to the System to internal accounts under our control.

- Using authentication and authorization controls.

- Using encrypted network connections (such as HTTPS) and hardened infrastructure where applicable.

- Maintaining system updates and monitoring for security issues on a reasonable basis.

7. Rights and contact

If you are a user of accounts or systems managed by PowerBoot and have questions about how your data is processed in the System, or wish to exercise applicable data protection rights (such as access or deletion of data in workflows), you can contact us at:

Contact email: [email protected]

We will handle any requests in accordance with our internal policies and applicable law.