n8nChat Privacy Policy

Introduction

This Privacy Policy explains how n8nChat ("we", "us", "our", or "the extension") collects, uses, stores, and protects your personal information and user data when you use our Chrome browser extension and related services. By using n8nChat, you consent to the data practices described in this policy.

User Data Collection and Processing

n8nChat collects and processes user data as described below. We are committed to transparency about the data we collect and how it is used.

1. Personal Information (Account Data)

When you create an account or sign in to n8nChat, we collect the following personal information:

• Email address: We collect your email address to create and manage your account, authenticate your identity, and send you transactional emails such as login links, account notifications, and subscription-related communications.
• First and last name: We collect your name to personalize your experience within the extension.
• Password: If you register with a password, it is securely hashed before storage. We never store plaintext passwords.
• Storage: This personal information is stored securely on our servers and is necessary to provide core account functionality.
• Purpose: To authenticate you, manage your subscription and credits, and enable you to use n8nChat across sessions and devices.

2. Subscription and Payment Data

• What we collect: Subscription plan details, billing status, credit balance, and payment transaction records.
• Payment processing: All payment processing is handled by Stripe, a PCI-compliant third-party payment processor. We do not store your full credit card number or payment card details on our servers. Stripe may collect and process your payment information in accordance with their own privacy policy (https://stripe.com/privacy).
• What we store: We store a Stripe customer identifier linked to your account to manage your subscription and process transactions.
• Purpose: To process payments, manage subscriptions, and maintain your credit balance.

3. Authentication Tokens and Sessions

• What we collect: Authentication tokens (JWT) are generated when you sign in and are stored locally in the extension to keep you logged in.
• Purpose: To verify your identity and maintain an active session without requiring you to log in repeatedly.
• Storage: Tokens are stored locally in your browser's extension storage. Session records are maintained on our servers to validate active sessions.

4. API Keys for Third-Party AI Services

• What we collect: API keys for third-party AI services (such as OpenAI, Anthropic, or Google Gemini) that you voluntarily provide.
• How we use it: These API keys are used solely to authenticate with the respective AI services on your behalf to provide workflow generation functionality.
• Storage: API keys are stored locally in your browser's extension storage and are not transmitted to our servers.

5. Chat and Conversation Data

• What we collect: Chat history and message content between you and AI models within the extension.
• How we use it: To maintain conversation context and provide continuity in your workflow creation experience.
• Storage: Chat histories are stored locally in your browser and are not transmitted to our servers.

6. Website Content

• What we collect: n8n workflow content from the active browser page when you use the extension.
• How we use it: To allow AI models to understand workflow context and generate appropriate nodes and configurations.
• Transmission: When you use the extension, website content may be transmitted directly to the third-party AI service you have selected (via the API key you provided) to generate responses and workflow suggestions. This data is not sent to our servers.

How We Use Your Information

We use the information we collect for the following purposes:

• To create, manage, and authenticate your user account using your email address.
• To send you transactional emails, including login links and account-related notifications.
• To process subscription payments and manage your credit balance.
• To provide and improve the core functionality of the n8nChat extension.
• To personalize your user experience.
• To communicate important service updates or changes.

We do not use your personal information for advertising or marketing purposes unrelated to n8nChat.

Data Storage and Retention

Server-Side Data

• Account information (email address, name, hashed password), subscription details, and credit balances are stored on our secure servers.
• This data is retained for as long as your account is active or as needed to provide you with our services.
• You may request deletion of your account and associated data by contacting us (see Contact Us below).

Client-Side Data (Stored in Your Browser)

• API keys, authentication tokens, chat histories, and conversation data are stored locally in your browser's extension storage.
• You can clear this data at any time by clearing your browser's extension data or through the extension's settings.
• When you uninstall the extension, all locally stored data is automatically removed.

Data Sharing and Third Parties

• We do not sell, rent, or trade your personal information to third parties.
• Stripe: Your payment information is processed by Stripe. We share your email address and a customer identifier with Stripe to facilitate payment processing. Stripe's privacy policy governs how they handle your data.
• AI service providers: When you make a request through the extension using your own API key, your prompt data and relevant workflow content are transmitted directly to the third-party AI provider you have selected (e.g., OpenAI, Anthropic, or Google). These transmissions are subject to the respective privacy policies of those providers.
• Email services: We use third-party email services to send transactional emails (such as login links) to your email address.
• We may share information if required by law, regulation, or legal process.

Security

• We implement industry-standard security measures to protect your personal information, including encryption in transit (HTTPS/TLS) and secure password hashing.
• API keys and conversation data stored locally use your browser's built-in storage security mechanisms.
• Authentication tokens are generated using secure methods and have expiration periods.
• While we strive to protect your data, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Your Rights

You have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that we correct any inaccurate personal data.
• Deletion: You may request deletion of your account and all associated personal data by contacting us.
• Local data control: You can delete locally stored data (API keys, chat histories) at any time through your browser settings or by uninstalling the extension.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any significant changes will be notified through the extension or our website. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about your personal information, please contact us at:
info@willscreative.com