1. Introduction

JustWorkflowIt ("we," "us," or "our") operates the JustWorkflowIt workflow orchestration platform at justworkflowit.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, name, and authentication credentials managed through AWS Cognito. If you sign up through a third-party provider, we receive your profile information as authorized by that provider.

2.2 Organization and Usage Data

We collect information about the organizations you create or join, including organization names, membership roles, and permissions. We also collect data about your use of the Service, including workflow definitions, job submissions, execution history (step inputs, outputs, timing, and errors), and API usage metrics.

2.3 Billing Information

If you subscribe to a paid plan, our payment processor (Stripe) collects and processes your payment information. We do not store full credit card numbers on our servers. We retain billing records such as plan type, usage counts, and invoice history.

2.4 Marketplace Data

If you publish workflows to the JustWorkflowIt Marketplace, we collect listing metadata, version information, pricing configuration, and usage statistics. If you are a marketplace publisher receiving payouts, we collect information required by Stripe Connect for identity verification and payment processing.

2.5 Technical Data

We automatically collect technical information including IP addresses, browser type, device information, and access timestamps. We use structured logging for operational monitoring and debugging.

3. How We Use Your Information

Provide, operate, and maintain the Service, including workflow execution, job scheduling, and step processing
Manage your account, organization memberships, and subscription plans
Process billing, enforce usage limits (jobs per day, concurrent jobs), and manage subscription tiers
Facilitate marketplace transactions between publishers and consumers, including payout processing via Stripe Connect
Monitor Service performance, debug issues, and improve reliability
Enforce our Terms of Service and protect against unauthorized access
Communicate with you about Service updates, security alerts, and support

4. Data Storage and Security

Your data is stored on Amazon Web Services (AWS) infrastructure, including Aurora PostgreSQL for persistent data and DynamoDB for caching. All data is encrypted in transit (TLS) and at rest. We use AWS Cognito for authentication, with JWT-based authorization for API access. API authentication tokens are hashed before storage.

Organization data is isolated at the database level. Each organization's workflows, jobs, execution history, and configuration are logically separated and access-controlled through role-based permissions.

5. Data Sharing and Disclosure

We do not sell your personal information. We share data only:

With service providers: AWS (infrastructure), Stripe (payment processing), and other providers necessary to operate the Service
Within your organization: Other members of your organization can see shared workflows, jobs, and execution data based on their assigned roles and permissions
On the Marketplace: If you publish a workflow listing, its metadata, description, and usage statistics are visible to other marketplace users
For legal compliance: When required by law, regulation, or legal process

6. Data Retention

Job execution history is retained according to your subscription plan (Free: 30 days, Plus: 30 days, Pro: 90 days). After the retention period, execution data is permanently deleted. Account and organization data is retained as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Object to or restrict certain processing

To exercise any of these rights, contact us at support@justworkflowit.com.

8. Cookies and Tracking

We use essential cookies for authentication session management. We do not use third-party advertising cookies or cross-site tracking.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at support@justworkflowit.com.