Privacy

Automate stores the minimum needed to run workflows. Customer names, emails, phones, and addresses are not requested. Conditions may use a customer id and tags only.

Stored data

Workflow definitions, redacted run history, encrypted HTTP secrets, monthly run counts, and plan state.

Deletion

Uninstall cancels jobs and deletes sessions. shop/redact permanently deletes shop data. customers/redact removes that customer id from history. customers/data_request exports the redacted rows we hold.