Privacy Policy

Last updated: 2025-12-28

1. Overview

n8nGalaxy (“we”, “our”, “us”) is committed to protecting user privacy. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your choices.

2. Data We Collect

2.1 Marketing Website (n8ngalaxy.com)

• No account is required to browse the website.
• We do not collect personal data by default.
• We may collect basic technical logs necessary for security and performance (e.g., IP address in server logs).

2.2 Automation Platform (n8n.n8ngalaxy.com)

When you use the automation platform, we may process data that you provide or explicitly authorize through connected services, including:

• OAuth access tokens and refresh tokens (where applicable)
• Workflow configuration metadata (nodes, connections, schedules)
• Data payloads processed within workflows (e.g., email content, file metadata, sheet rows, calendar events)

3. Google API Data Use (Gmail, Drive, Sheets, Calendar)

If you connect your Google account, n8nGalaxy may access Google user data only after you provide explicit OAuth consent. Access is limited to the scopes you approve and is used only to execute the workflows you configure.

3.1 What we do with Google data

• Use Google data only to perform user-requested automation tasks.
• Do not use Google data for advertising, profiling, or selling data.
• Do not allow humans to read Google user data except for limited support or security reasons (see Section 6).

3.2 Specific examples by API

• Gmail API: Read, send, draft, label, or search emails only when configured in a workflow.
• Drive API: Read file metadata/content or upload files only for files/folders selected by the workflow.
• Sheets API: Read/write spreadsheet data (rows/cells) only in the specified spreadsheets.
• Calendar API: Read/create/update events only in the calendars you authorize and within workflow logic.

4. Cookies

The marketing site does not use advertising cookies. The automation platform may use essential cookies for authentication, session security, and platform functionality. We do not use Google user data for ad personalization.

5. Data Retention and Deletion

• We retain OAuth tokens only as long as required to provide the service or until you revoke access.
• You can revoke Google access at any time via your Google Account security settings.
• You may request deletion of stored credentials and automation data, subject to operational and legal requirements.

6. Human Access to Data

We do not permit human access to Google user data except in limited circumstances:

• When you explicitly request support and authorize us to view specific information.
• When needed to investigate security incidents, abuse, or fraud.
• When required to comply with applicable law or lawful requests.

7. Sharing of Data

We do not sell or rent personal data.

We may share data only with:

• Infrastructure providers (hosting, database, monitoring) solely to operate the service.
• Authorities if required by law.

8. Security

We implement reasonable technical and organizational safeguards to protect data, including HTTPS, access controls, and secure storage practices. No method of transmission or storage is completely secure.

9. Your Choices

• Disconnect Google OAuth at any time from your Google Account settings.
• Disable or delete workflows to stop processing.
• Request deletion of stored credentials where applicable.

10. Children’s Privacy

The service is not intended for children under 13, and we do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted here with a revised “Last updated” date.

12. Contact

For privacy inquiries, contact: privacy@n8ngalaxy.com