Privacy Policy
Effective Date: June 9, 2025
This Privacy Policy explains how we collect, use, and share your personal information when you use our service, and your rights regarding that information.
By using Dafthunk, you agree to this Privacy Policy. Please also review our Terms of Service.
1. Information We Collect
We collect the following personal information:
- Account Information: Username, email address.
- Authentication Data: If you choose to sign in via Google or GitHub, we receive your basic profile information from these services (name, email).
- Workflow and Execution Data: Information related to workflows and their executions, including but not limited to workflow definitions, inputs, outputs, intermediary results, execution metadata, and related data.
- Billing Information: Collected and processed by Stripe (see Section 5).
- Third-Party Integration Data: When you connect third-party services (such as Google, Slack, or other integrations), data from those services may be processed and stored by Dafthunk as part of your workflow executions. You are solely responsible for ensuring you have the appropriate rights and permissions to use and process such data through Dafthunk.
- Google Mail: When you connect your Google Mail account and include Gmail nodes in your workflows, we access your Gmail only during workflow execution to perform the actions you configured (such as sending emails, reading messages, or managing drafts). We do not access your Gmail data outside of workflow executions. Email content and metadata processed through workflows may be stored in execution logs.
- Google Calendar: When you connect your Google Calendar account and include Calendar nodes in your workflows, we access your calendars only during workflow execution to perform the actions you configured (such as creating, reading, updating, or deleting events). We do not access your calendar data outside of workflow executions. Calendar data processed through workflows may be stored in execution logs.
We do not collect sensitive personal data unless it is intentionally provided by the user as part of workflow executions, in which case the user is solely responsible for ensuring that the processing of such data complies with applicable data protection laws.
2. How We Collect Information
We collect personal information when you:
- Register for an account.
- Sign in via Google or GitHub.
- Create and execute workflows.
- Subscribe to a paid plan.
- Contact us for support.
We may also collect usage data (such as logs and interactions within Dafthunk) to improve our service.
3. How We Use Your Information
We use your personal information to:
- Provide, maintain, and improve Dafthunk.
- Process your subscription and payments.
- Communicate with you about your account or updates to our service.
- Respond to support requests.
We do not use your information for advertising or sell it to third parties.
4. Legal Basis for Processing
We process your personal information, including Workflow and Execution Data, based on the following legal bases:
- Contractual necessity: To provide you with access to Dafthunk and its functionalities, including the ability to create and execute workflows.
- Legal obligation: For compliance with legal requirements.
- Legitimate interests: To maintain, improve, and secure the service, including managing workflow and execution data to ensure reliable operation.
- Consent: When required, such as for marketing emails (if implemented).
5. Sharing of Information
We may share your information with:
- Stripe: For payment processing. We do not store your payment information.
- Cloudflare: For hosting and content delivery.
We do not share your personal information with any other third parties except as required by law.
6. International Data Transfers
As our service is accessible worldwide, your personal information may be transferred and stored outside your country of residence.
7. Data Retention
We retain your personal information for as long as your account is active and as needed to comply with legal obligations or resolve disputes. You can request deletion of your account at any time (see Section 9).
8. Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse.
However, as Dafthunk is an alpha-stage service under active development and leverages AI-generated components, you acknowledge that there may be inherent risks and limitations in the system's security and reliability. We encourage you to avoid processing highly sensitive or critical information through the service at this stage and to regularly back up important data.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access your data.
- Correct or update inaccurate data.
- Request deletion of your data.
- Object to or restrict processing of your data.
- Data portability.
You can exercise these rights by contacting us at contact@dafthunk.com.
10. Children's Privacy
Dafthunk is not intended for use by children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the service or via email.
Please review this policy periodically for updates.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at:
Email: contact@dafthunk.com
Location: Switzerland