Privacy Policy

1. Introduction

puq.ai ("we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, and safeguard your information when you use our workflow automation platform and website (collectively, the "Service").

2. Information We Collect

A. Information You Provide

  • Account Information: When you register, we collect your name, email address, and password.

  • Billing Information: If you subscribe to a paid plan, our third-party payment processor collects your payment details. We do not store full credit card numbers.

  • Customer Support: Any information you provide when contacting our support team (e.g., screenshots, logs).

B. Information from Connected Services (Third-Party Integrations)

To perform automations, you may authorize us to access data from third-party services (e.g., Slack, Salesforce, Gmail, X/Twitter).

  • Credentials: We store encrypted access tokens (OAuth tokens) to authenticate with these services on your behalf.

  • Content Data: We process data (e.g., email bodies, Slack messages, CRM records) only as required to execute the specific workflows you configure.

C. Usage Data

We automatically collect log data about how you interact with our Service, including IP addresses, browser type, and timestamps, to monitor system stability and prevent abuse.

3. How We Use Your Information

We use your information for the following purposes:

  • To Provide the Service: Running your automation workflows (e.g., reading an email to trigger a Slack message).

  • To Improve Our AI: Analyzing aggregated, anonymized usage patterns to improve the accuracy of our AI models. (Note: We do not use your private content data to train public models without consent).

  • Communication: Sending you transaction receipts, security alerts, and support messages.

4. Google API Services User Data Policy (Limited Use Disclosure)

puq.ai's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, regarding data accessed via Restricted Scopes (e.g., Gmail API, Google Drive API):

  1. No Transfer: We do not transfer your Google user data to third parties unless strictly necessary to provide or improve the Service's user-facing features, to comply with applicable law, or as part of a merger/acquisition.

  2. No Advertising: We strictly do not use or transfer your Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.

  3. No Human Access: Our employees or contractors are prohibited from reading your Google user data unless:

    • We have your explicit, documented consent to resolve a specific support issue;

    • It is necessary for security purposes (e.g., investigating a bug or abuse);

    • The data is aggregated and anonymized for internal operations.

5. Data Sharing and Disclosure

We do not sell your personal data. We share data only in the following circumstances:

  • Service Providers: We use trusted third-party providers for hosting (e.g., AWS, Google Cloud), database management, and payment processing. These providers perform services on our behalf and are bound by confidentiality agreements.

  • Legal Requirements: We may disclose information if required by law, subpoena, or valid legal process.

6. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption at Rest: Sensitive data (like OAuth tokens and API keys) is encrypted in our database.

  • Encryption in Transit: All data transmitted between your client, our servers, and third-party APIs is encrypted using TLS/SSL.

7. Data Retention

We retain your personal data and workflow logs only for as long as necessary to provide the Service or as required by law. You may request the deletion of your account and associated data at any time.

8. Your Rights (GDPR / CCPA)

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.

  • Request correction of inaccurate data.

  • Request deletion of your data ("Right to be Forgotten").

  • Withdraw consent for data processing.

To exercise these rights, please contact us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us: