What we collect
- Account data: your email address and, if you sign in with Google, your name from that profile.
- Monitoring metadata: workflow names, execution statuses and timestamps, aggregate counts, instance health, and error messages scrubbed of emails and secret-shaped strings before storage. We never store the payloads your workflows process - see the security page.
- Outcome observations: aggregate-only Outcome Contract measurements such as counts, quality scores, and time windows. They do not contain records, prompts, workflow payloads, downstream responses, or proof bodies.
- Product analytics, session replay, and error reports: usage events, page views, and session recordings (PostHog) plus application errors (Sentry) to keep the product working and improve it. Analytics and recording only run after you consent - nothing is captured until then, and you can turn it off any time from Settings. Session recordings mask all on-screen text and inputs: we never record your automation data, API keys, webhook secrets, error message contents, or client details. We may also show optional in-product surveys (PostHog).
What we use it for
Running the service you signed up for: detecting incidents, sending the alerts and reports you configure, and billing. We don’t sell data, and we don’t use your monitoring data for advertising.
Who touches it (subprocessors)
- Railway - application and database hosting.
- Resend - transactional email (sign-in links, alerts, reports).
- Dodo Payments - checkout and subscription billing; card details never reach us.
- Sentry - application error monitoring.
- PostHog - product analytics, session replay, and surveys.
Retention
Execution aggregates are kept for your plan’s retention window (7, 90, or 365 days) and pruned on a nightly sweep. Account data lives as long as your account does.
Deletion and access
Email support@workflowpulse.dev from your account address to request an export or deletion of your organization and everything under it. Agency-tier customers who need a DPA: same address.
Changes
If this policy changes materially, we’ll email account holders before the change takes effect.