Privacy Policy
1. Overview
Nodezap, Inc. ("Nodezap", "we", "us") provides a cloud platform for building internal tools, automating workflows, and managing business processes. This Privacy Policy explains what data we process, why, and the choices you have. It applies to our website and product (the "Services").
2. Data we process
| Category | Purpose |
|---|---|
| Account data (name, email, org) | Create and secure your account, provide support |
| Workspace content (workflows, tools, records) | Operate the Services you build |
| Connected-system data | Read/write only the data your workflows access, using credentials you provide |
| Usage & diagnostics | Reliability, security, and product improvement |
3. How we use data
- To provide, maintain, and secure the Services
- To process the workflows and automations you configure
- To provide support and communicate about your account
- To detect, prevent, and address abuse or security incidents
We do not sell your data, and we do not use your workspace content to train third-party models.
4. Connected systems
When you connect a database, SaaS tool, or API, Nodezap accesses only the data your workflows and tools reference, using the scoped credentials you provide. Your source data remains in your systems; you can revoke access at any time.
5. Sub-processors & AI
We use a limited set of vetted infrastructure and AI sub-processors to deliver the Services (for example, cloud hosting and model providers used by AI steps). Data sent to AI providers is used only to perform the requested step and is not retained for training. A current list is available on request.
6. Security
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Role-based access control and granular audit logging
- Isolated, encrypted credential storage
- Regular testing and monitoring
See our Security page for details.
7. Data retention
We retain workspace content for as long as your account is active. When you delete content or close your account, we delete or anonymize associated data within a reasonable period, except where retention is required by law.
8. Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise them, contact privacy@nodezap.com. If you are in the EEA/UK, you may also lodge a complaint with your supervisory authority.
9. International transfers
We may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses. Enterprise customers may select US or EU data residency.
10. Changes & contact
We may update this policy and will revise the "Last updated" date above. For any privacy question, contact privacy@nodezap.com.