Privacy Policy

1. Overview

This policy explains what personal data AutoFlowRPA (AutoFlowRPA) collects, why, and how it is handled. It covers both the AutoFlowRPA desktop application and the autoflowrpa.com website. We comply with applicable privacy laws, including Japan's Act on the Protection of Personal Information (APPI).

2. The desktop app runs offline

AutoFlowRPA executes your automations entirely on your computer. The content of your workflows — files, spreadsheets, websites you automate, credentials you enter into flows — is processed locally and is never transmitted to our servers.

The app contacts our servers only for license verification. At that time it sends: your license key, a machine identifier, the machine name, operating system version and app version. No workflow content is ever included.

3. Data we collect on the website

Account: email address and display name (when you register by email or sign in with Google). Authentication is provided by Supabase.

Payments: processed by Stripe. We never receive or store your card number. We keep your Stripe customer ID, plan and subscription status.

Support: messages you send via the contact form or bug reports, and your email address for replies.

Analytics: page paths viewed and approximate region, used in aggregate to understand site traffic. Cookies are used for login sessions, language/theme preferences and cookie-consent state.

4. Purposes of use

We use this data to: provide and operate the service; manage licenses and subscriptions; process payments; respond to inquiries and bug reports; improve the product and website; prevent fraud and abuse; and comply with legal obligations.

5. Sharing and processors

We do not sell personal data. We share data only with service providers (processors) needed to operate the service: Supabase (database & authentication), Stripe (payments), Vercel (website hosting), Cloudflare (DNS/CDN), Google (OAuth sign-in) and Resend (transactional email).

These providers may store data on servers outside your country, including outside Japan. We choose providers that maintain appropriate safeguards consistent with APPI requirements for cross-border transfers.

6. Retention

Account and license data is kept while your account exists. Payment records are kept as required by tax and accounting law. You may request deletion of your account data at any time (see Section 8); some records may be retained where the law requires.

7. Security

Data is encrypted in transit (TLS). Access to production data is restricted and authenticated. Payment credentials are handled exclusively by Stripe, a PCI-DSS Level 1 provider.

8. Your rights

You may request disclosure, correction, deletion or suspension of use of your personal data, as provided by the APPI and other applicable laws. Contact us at support@autoflowrpa.com from your registered email address; we will verify your identity and respond without undue delay.

9. Cookies

We use cookies for login sessions, language/theme preferences, consent state and traffic measurement. You can refuse analytics cookies via the consent banner and delete cookies in your browser settings; core cookies required for login cannot be disabled while using the dashboard.

10. Changes

We may update this policy. Material changes are announced on this page with a new revision date.

11. Contact

Privacy inquiries: support@autoflowrpa.com — AutoFlowRPA