Privacy Policy
This Privacy Policy explains how StepAutomations (“we”, “us”, or “our”) processes information when you use the EASY WAY application, our automation services, or integrations with Google, Instagram, Facebook, and other supported platforms.
1. Information we may process
Depending on the integrations and workflows you authorize, we may process:
- Google Account identifiers, email address, and profile information made available during OAuth authorization.
- Google Drive file and folder names, identifiers, metadata, permissions, and file contents.
- Google Sheets spreadsheet structure, cell values, formulas, formatting, and related metadata.
- Google Docs document structure, text, formatting, and related metadata.
- Instagram or Facebook account identifiers, usernames, profile information, and other information made available through Meta APIs.
- Messages, attachments, reactions, and related conversation metadata when you interact with a StepAutomations account or Page.
- Information that you submit directly through forms, messages, files, or configured workflows.
- Technical information required to operate, secure, and troubleshoot our automations, including timestamps, event identifiers, workflow execution data, and system logs.
The exact information processed depends on the workflow you configure and the permissions you grant.
2. How we use information
We process information only to provide user-requested automation functions, including:
- Reading, creating, updating, organizing, moving, or deleting Google Drive files and folders when directed by an authorized workflow.
- Reading, creating, updating, or formatting Google Sheets spreadsheets.
- Reading, creating, updating, or formatting Google Docs documents.
- Transferring information between services as explicitly configured by the user.
- Operating messaging and customer-support automations.
- Maintaining workflow context and execution state.
- Preventing abuse, investigating errors, and improving service reliability.
- Complying with applicable legal obligations.
We do not use Google or Meta user data for unrelated advertising. We do not sell personal information.
3. Google API Services User Data Policy
StepAutomations’ use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Google user data is accessed only after the user grants permission through Google OAuth. Access is limited to the permissions required by the configured automation.
We do not use Google user data to create advertising profiles, serve personalized advertising, determine creditworthiness, or train general-purpose artificial intelligence models.
4. OAuth credentials and authorization
OAuth access and refresh tokens may be stored in our self-hosted automation infrastructure so that authorized workflows can continue operating without requiring the user to sign in for every execution.
OAuth credentials are used only to access the services and data authorized by the user. Users may revoke access at any time through their Google Account permissions or the corresponding settings of another connected platform.
5. AI-assisted processing
When a workflow explicitly includes an AI-assisted function, relevant content may be sent to the AI service provider configured for that workflow solely to perform the requested operation.
AI-assisted processing is not enabled automatically for all data. We do not use Google or Meta user data to train unrelated or general-purpose AI models under our control.
6. Service providers and infrastructure
Our services may use:
- Google APIs and Google Workspace services.
- Meta Platforms and Meta APIs.
- Self-hosted n8n automation infrastructure.
- Hosting and infrastructure providers, including Hetzner.
- AI service providers selected for a particular workflow.
- Other third-party services explicitly configured by the user.
These providers may process information only as necessary to perform their respective functions and under their applicable terms and privacy obligations.
7. Data storage and security
Data may be temporarily or persistently stored in our self-hosted automation infrastructure when required by a workflow, for execution history, troubleshooting, security, or service continuity.
We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. No method of electronic transmission or storage is completely secure.
8. Data retention
We retain personal information only for as long as reasonably necessary to:
- Perform the requested automation.
- Maintain service functionality.
- Resolve technical issues or disputes.
- Prevent fraud or abuse.
- Comply with applicable legal obligations.
Data that is no longer required is deleted or anonymized where appropriate. Retention periods may differ depending on the configured workflow and connected service.
9. Data sharing and sale
We do not sell personal information.
We do not share personal information with third parties except:
- When required to perform a workflow explicitly configured or authorized by the user.
- With service providers necessary to operate the service.
- When required by law.
- To protect users, our services, or the rights and security of others.
- When the user expressly requests or authorizes the sharing.
10. User choices, access revocation, and deletion
You may:
- Revoke Google access through Google Account permissions.
- Remove access through the settings of another connected platform.
- Request access to or deletion of personal data processed by StepAutomations.
- Ask questions about how your data is processed.
Deletion instructions are available at https://www.stepautomations.com/data-deletion.
Revoking OAuth access prevents future access but does not automatically delete data previously processed or retained where continued retention is legally permitted.
11. Third-party platforms
Your use of Google, Google Drive, Google Sheets, Google Docs, Instagram, Facebook, and other third-party platforms is also governed by their own terms and privacy policies.
This Privacy Policy applies only to information processed by StepAutomations.
12. Changes to this policy
We may update this Privacy Policy when our services, integrations, or legal obligations change. The latest version will be published on this page with the updated date.
13. Contact
For privacy questions or requests, contact stepautomations.ai@gmail.com.