Privacy Policy
1. Introduction
Process Lake ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our flowchart creation and execution platform ("Service"). By using our Service, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, password, and company information
- Profile Information: User preferences, settings, and company profile details
- Content: Workflows, flowcharts, automation rules, and any data you input into our platform
- Communications: Messages you send to us for support or feedback
2.2 Information We Collect Automatically
- Usage Analytics: How you interact with our Service, features used, and performance metrics
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP addresses, access times, pages viewed, and actions taken
- Cookies and Tracking: Session cookies and similar technologies (see Section 8)
2.3 Information from Third Parties
- Integration Data: Data from third-party services you connect to your workflows
- Payment Information: Billing details processed through Stripe (we do not store full payment card details)
3. How We Use Your Information
3.1 To Provide and Improve Our Service
- Create and manage your account
- Process and execute your workflows
- Provide customer support
- Analyze usage patterns to improve functionality
- Develop new features and services
3.2 For Communication
- Send transactional emails (account updates, security alerts)
- Provide customer support responses
- Send marketing communications (with your consent, where required)
3.3 For Security and Legal Compliance
- Protect against fraud and unauthorized access
- Comply with legal obligations
- Enforce our Terms of Service
3.4 For Analytics and Research
- Understand how our Service is used
- Improve user experience
- Generate anonymized usage statistics
4. How We Share Your Information
4.1 We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4.2 Service Providers
We share information with trusted third-party service providers who help us operate our Service:
- DigitalOcean: Cloud hosting and data storage
- Stripe: Payment processing
- Google Analytics: Usage analytics
- Microsoft Clarity: User behavior analytics
- HubSpot: Customer relationship management and marketing
These providers are contractually obligated to protect your information and use it only for the services they provide to us.
4.3 Third-Party Integrations
When you connect third-party services to your workflows, you authorize us to access and use data from those services as necessary to execute your workflows. This data exchange is governed by your permissions and the terms of those third-party services.
4.4 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
4.5 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.
5. Data Storage and Security
5.1 Where We Store Data
Your data is stored on secure servers provided by DigitalOcean, primarily located in the United States.
5.2 Security Measures
- Encryption in transit and at rest
- Regular security assessments
- Access controls and authentication
- Secure coding practices
5.3 Data Retention
- Account data: Retained while your account is active and for a reasonable period after closure
- Usage analytics: Retained for up to 2 years for service improvement
- Workflow data: Retained according to your subscription plan and legal requirements
- You may request deletion of your data (see Section 9)
6. International Data Transfers
As we serve customers internationally, your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for such transfers.
7. Your Rights and Choices
7.1 Access and Control
- Access and update your account information through your profile settings
- Export your workflow data
- Delete workflows and content you've created
7.2 Marketing Communications
- Using the unsubscribe link in emails
- Contacting us directly
- Updating your preferences in account settings
7.3 Data Protection Rights
- Right to Access: Request information about your personal data
- Right to Rectification: Correct inaccurate information
- Right to Erasure: Request deletion of your data
- Right to Portability: Receive your data in a structured format
- Right to Restrict Processing: Limit how we use your data
- Right to Object: Object to certain types of processing
8. Cookies and Tracking Technologies
8.1 Types of Cookies We Use
- Essential Cookies: Required for basic Service functionality and user authentication
- Analytics Cookies: Help us understand how you use our Service (Google Analytics, Microsoft Clarity)
- Preference Cookies: Remember your settings and preferences
8.2 Managing Cookies
You can control cookies through your browser settings, but disabling essential cookies may affect Service functionality.
8.3 Do Not Track
Our Service does not currently respond to Do Not Track signals.
9. Children's Privacy
Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
10. Third-Party Links and Services
Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those external sites or services. We encourage you to review their privacy policies.
11. California Privacy Rights
- Right to know what personal information we collect and how it's used
- Right to delete personal information (with certain exceptions)
- Right to opt out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
12. European Privacy Rights
- Legal basis for processing: Legitimate interest, contract performance, or consent
- Right to lodge a complaint with a supervisory authority
- Additional rights as described in Section 7.3
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website, sending an email notification to registered users, or providing notice through our Service. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
14. Data Controller and Processor
- Process Lake acts as a data controller for account and usage information
- Process Lake acts as a data processor for workflow content and integrated data
- You act as a data controller for any personal data you process through your workflows
15. Contact Us
15.1 Privacy Questions
For questions about this Privacy Policy or our data practices, contact us at:
Email: [PRIVACY EMAIL]
Address: [YOUR ADDRESS]
15.2 Data Protection Officer
For GDPR-related inquiries, you may contact our Data Protection Officer at:
Email: [DPO EMAIL]
15.3 Exercising Your Rights
To exercise your privacy rights, please contact us with:
- Your name and email address
- Specific right you wish to exercise
- Any relevant details to help us process your request
We will respond to your request within 30 days (or as required by applicable law).
*This Privacy Policy is effective as of the date listed above and applies to all information collected by Process Lake.*
Print