Policies

Privacy Policy

Last updated September 15, 2026.

Who we are

RunFlowPilot (“we”) provides an AI-assisted builder that drafts n8n workflows you deploy to infrastructure you control. For anything privacy-related — access, correction, or deletion requests — write to admin@runflowpilot.com.

What we collect and why

Account

Email address, display name, and authentication identifiers, handled by Firebase Authentication. Why: to sign you in, identify your data, and enforce trial and subscription access.

Plan, trial, and credits ledger

Plan, trial start/end, credit balance, allowances, reservations, and usage events. Why: to grant the 3-day trial with 40 credits, reset allowances each billing period, and prevent double-spending.

n8n connections

Instance names, URLs, verification metadata, and your n8n API key — encrypted before storage and never displayed again. Why: to verify, deploy to, and read back from the instances you connect.

Your content

Conversations, chat messages, workflow drafts, plans, deployment records and attempts, and MCP token hashes. Why: to generate, store, validate, and deploy your workflows, and to resume or link them without duplicates.

AI processing inputs

The prompts and workflow context you submit for generation, sent to Google's Gemini API. Why: that API call is the generation feature.

Payments

Email and subscription records processed by WarriorPlus for checkout and payment notifications. Why: to sell and manage paid plans.

Support messages

Whatever you send to our support address. Why: to answer you. Support messages are email only — the app stores no separate support tickets.

Who we share data with

Google (Firebase Authentication + Firestore)

Identity and stored data hosting. Data lives in the Firebase project backing this app.

Cloudflare (Workers + Queues)

Hosting and background generation processing. Requests pass through Cloudflare infrastructure.

Google Gemini API

Receives your generation prompts and workflow context to produce drafts.

Stripe

Receives your email and subscription data to process payments and billing-portal sessions.

Your own n8n instance

Receives the workflows you choose to deploy — on infrastructure you control.

There are no advertising or analytics vendors: the app ships no third-party trackers. Data is never sold.

Cookies and device storage

The app sets no advertising or analytics cookies and reads no tracking identifiers. Sign-in sessions are kept by Firebase Authentication in your browser's local device storage; clearing site data signs you out.

How long data is kept

Account data is kept while your account is active. Credit balances reset to the plan allowance each billing period (unused credits do not roll over). Payment records held by Stripe are governed by Stripe's own policy.

Deleting your account (Settings → Danger Zone → type DELETE to confirm) purges your profile, n8n connections, drafts, credits data, tokens, and subscription index, cancels any subscription, and erases stored credentials. No retention timetable beyond this is defined — that is flagged for owner review, not stated here.

Security

n8n API keys are encrypted before storage and never returned to the browser; connection checks run server-side; per-user data access is scoped by database rules; deployments always land inactive until you switch them on. No system is perfectly secure — if you suspect a problem, tell us immediately at the address above.

Your choices

Review and edit your profile, instances, and drafts at any time in the app.
Cancel paid plans in the Stripe billing portal; access runs to period end.
Delete everything via Settings → Danger Zone, or ask us at admin@runflowpilot.com for access, correction, or deletion help.

Related: Refund Policy · Support