Legal

Privacy Policy

Last updated: 2025

This Privacy Policy explains how nodeway (“we”, “us”, or “our”) collects, uses, and protects personal data in connection with our automation strategy, implementation, and maintenance services. We primarily work with tools such as n8n, Make, Zapier, HubSpot, Airtable, and similar platforms to connect and automate systems on behalf of our clients.

This Policy is informational only and does not replace any specific contract or data processing agreement you may have with us. Where there is any conflict, the terms of the relevant contract or data processing addendum will prevail.

1. Who we work with

In most cases, we act as a service provider / processor to our clients, who are the controllers of the personal data they collect via their own websites, CRMs, and tools. In some cases, such as our own website analytics or email list, we may act as an independent controller.

2. Data we may process

The exact categories of data we work with depend on your systems and the workflows we build for you. Examples include:

  • Contact & lead data – names, email addresses, phone numbers, company details, job titles, CRM record IDs.
  • Interaction data – form submissions, campaign metadata, subscription status, automation logs, opt-in status.
  • Account & configuration data – API keys, webhook URLs, connection settings, environment variables and credentials required to connect the tools you use.
  • Usage & diagnostic data – high-level metrics or logs that help us understand how reliably workflows are running.

We do not intentionally request or target sensitive categories of personal data (such as health, biometric, or payment card data) unless this is expressly scoped and agreed in writing.

3. How we use personal data

We use personal data only as necessary to:

  • Design, implement, and maintain the workflows you ask us to build.
  • Test and troubleshoot automations, including investigating errors and improving reliability.
  • Communicate with you and your team about active projects, support, and performance.
  • Operate our own business (for example, invoicing, basic analytics, and improving our services).

4. Tools and sub-processors

To deliver our services, we may use third-party platforms such as n8n, Make, Zapier, HubSpot, Airtable, Google Workspace, project management tools, monitoring, and logging providers.

Where we act as a processor, we only use such providers under appropriate agreements and only for purposes compatible with the services we provide to you.

5. Data retention

We keep configuration data, logs, and related records only for as long as necessary to:

  • Operate and secure the automations we deploy for you.
  • Comply with legal, tax, and accounting obligations.
  • Maintain evidence of work performed, where required by contract.

You may request deletion or anonymisation of certain data, subject to any legal obligations that require longer retention.

6. Security

We apply reasonable technical and organisational measures designed to keep configuration data, credentials, and workflow-related information secure. In practice, this includes restricted access, use of encrypted channels, and separation of environments where appropriate.

7. Your rights

Where we act as a processor, we support our clients in responding to data-subject requests (for example, access, correction, or deletion). If you contact us directly and we are not the controller, we may forward your request to the relevant client or advise you who to contact.

8. International transfers

Depending on your stack and the tools used, data may be transferred or accessed from outside your country or region. Where required, we rely on appropriate transfer mechanisms offered by the relevant tools or include contractual protections in our agreements.

9. Website cookies & analytics

Our website may use basic analytics or cookies to understand aggregate traffic and improve our content. We do not use this data to build individual profiles beyond what is necessary for our own marketing or sales efforts. Where required by law, we will present consent tools or banners to manage these settings.

10. Updates to this Policy

We may update this Privacy Policy from time to time, for example when we add new services, tools, or legal requirements. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

11. Contact us

If you have any questions about this Privacy Policy, or about how we handle data in connection with your automations, you can contact us at:

  • Email: contact@nodeway.io
  • Phone: +8801711207407

This Privacy Policy is provided for general informational purposes and does not constitute legal advice. You should consult with a qualified legal professional to adapt this Policy to your specific business, jurisdiction, and data-processing activities.

For related terms, please also review our Terms of Service.