Privacy policy
Last updated: 22 October 2026
This policy covers the Automation Studio app and its waitlist. This site uses no cookies, and visit analytics only turn on if you accept them (see Cookies). The Spanish version (privacidad) prevails.
The app
Your n8n data never reaches us. Connections, API keys and MCP tokens are stored in your device’s Keychain. Workflows, executions, credentials and data tables travel only between your device and the n8n server you choose. Workflows you keep “on this device” stay on your device.
Usage data. With “Share usage data” on (Settings), the app sends anonymous counts of the features you use, such as “workflow created” or “execution opened”, to Google Firebase Analytics. They come with Firebase’s random per-install identifier, the device model, system and app version, and an approximate region derived from the network address. They never include workflow content or names, server addresses, credentials or execution data. There are no advertising identifiers, no tracking across apps and nothing linked to your identity. Purpose: understanding which features are used to improve the app. Legal basis: our legitimate interest (GDPR art. 6(1)(f)); you can object at any time by turning “Share usage data” off. Retention: at most 14 months.
Subscriptions. Automation Studio Pro is sold through the App Store: Apple handles the payment and we never see your card or Apple Account details. To validate purchases and unlock Pro on your devices, the app uses RevenueCat, which receives a random anonymous app user ID, your purchase and subscription history (products, dates, prices, trial and renewal status), the device model, system and app version, and an approximate country. Never your name, email, workflows or n8n data. Purpose: providing the subscription you bought. Legal basis: performing our contract with you (GDPR art. 6(1)(b)). Retention: while you're a customer and afterwards as long as tax and accounting law requires.
Feedback. If you send feedback, we receive what you write and, only if you choose to include it, the app version, system and device model. It is stored in Supabase until it has been dealt with, and at most two years. Legal basis: your consent, given by sending it.
Waitlist
| Controller | · |
|---|---|
| Data | Only your email. |
| Purpose | Telling you when beta access (TestFlight) opens and when the app launches. No advertising or other newsletters. |
| Legal basis | Your consent (GDPR art. 6(1)(a)), given by submitting the form. You can withdraw it at any time. |
| Recipients | Supabase, which hosts the list as our data processor. Nobody else. |
| Retention | Until you unsubscribe, or at most 6 months after the app launches. Then we delete it. |
| Your rights | Access, correction, deletion, objection, restriction and portability: write to . |
Emails
We only email you to invite you to the beta and to announce the launch. To leave the list, reply to any of those emails or write to and we delete your address. For anything else we would ask for a new, separate consent.
Processors and transfers
The waitlist and feedback are stored in Supabase, usage data in Google Firebase, subscription records in RevenueCat and, if you accept it, site analytics in Cloudflare, each under a GDPR data processing agreement. If data is processed outside the European Economic Area, it's covered by GDPR safeguards such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Cookies and site analytics
This site sets no cookies. It only keeps the language you pick and your answer to the analytics notice in your browser (local storage), and neither is sent anywhere.
If you accept the notice, we use Cloudflare Web Analytics to count visits in aggregate: the page you view, the site you came from, your browser and system type, an approximate country and the page load time. According to Cloudflare, it uses no cookies or local storage and doesn't identify anyone from their IP address. Purpose: knowing how many people visit the site and where they come from. Legal basis: your consent (GDPR art. 6(1)(a)). If you decline, it isn't loaded. You can change your mind at any time from the “Cookies” link in the footer of the home page.
Complaints
If you think we've mishandled your data, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.