Privacy Policy
Your privacy is important to us. This Privacy Policy explains how US Tech Automations, LLC ("USTA," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our website, platform, and services.
Table of Contents
1. Overview
US Tech Automations provides an AI-powered workflow automation platform that enables businesses to create, manage, and execute automated workflows. This Privacy Policy applies to:
- • Our website at ustechautomations.com (the "Site")
- • Our workflow automation platform and services (the "Platform" or "Services")
- • Any related applications, APIs, or tools we provide
- • Communications between you and US Tech Automations
By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: When you create an account, we collect your name, email address, password, company name, job title, and phone number.
- Billing Information: Payment card details, billing address, and transaction history. Note: We do not directly store your full credit card number; payment processing is handled by our PCI-compliant payment processors.
- Workflow Data: The workflows, automations, and configurations you create on our Platform, including workflow names, descriptions, node configurations, and execution logs.
- Communications: Information you provide when contacting support, completing surveys, participating in webinars, or requesting demos.
- Integration Credentials: OAuth tokens, API keys, and access credentials for third-party services you connect to our Platform (e.g., Gmail, Google Sheets, HubSpot, Salesforce).
2.2 Information Collected Automatically
- Usage Data: Information about how you use our Platform, including workflows executed, features accessed, time spent, and interaction patterns.
- Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Log Data: Server logs including access times, pages viewed, referring URLs, and system activity.
- Location Data: General geographic location based on IP address (country, region, city level only).
2.3 Information from Third Parties
- Connected Services: When you connect third-party services (Gmail, Google Sheets, Slack, etc.), we receive data from those services as authorized by you through OAuth or API connections.
- Business Partners: Information from resellers, referral partners, or business partners who refer you to our Services.
- Public Sources: Publicly available business information to verify accounts or improve our services.
3. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To provide, maintain, and improve our Platform, execute your workflows, and deliver requested features and functionality.
- Account Management: To create and manage your account, authenticate your identity, and process transactions.
- Customer Support: To respond to inquiries, troubleshoot issues, and provide technical assistance.
- Communications: To send transactional emails (account confirmations, password resets, workflow notifications) and, with your consent, marketing communications.
- Analytics & Improvement: To analyze usage patterns, monitor performance, and improve our Services, including developing new features.
- Security: To detect, prevent, and address fraud, security threats, and technical issues.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
- AI Model Training: Aggregated and anonymized usage data may be used to improve our AI models. Your actual workflow data and content are NOT used for AI training without explicit consent.
4. Information Sharing
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With trusted third-party vendors who assist in operating our Platform, processing payments, providing customer support, or performing analytics. These providers are contractually obligated to protect your data.
- Third-Party Integrations: When you connect external services to your workflows, data flows to those services as necessary for your automations to function.
- Team Members: Within your organization's account, as configured by account administrators.
- Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as a business asset.
- Legal Requirements: When required by law, subpoena, court order, or government request, or to protect our rights, property, or safety.
- With Consent: In other circumstances with your explicit consent.
5. Third-Party Integrations
Our Platform integrates with numerous third-party services, including but not limited to:
- • Google Services (Gmail, Google Sheets, Google Calendar, Google Drive, Google Docs)
- • CRM Platforms (Salesforce, HubSpot, GoHighLevel)
- • Communication Tools (Slack, Discord, Microsoft Teams)
- • Developer Tools (GitHub)
- • AI Services (OpenAI, Anthropic, Google AI)
- • And 100+ additional integrations
Important: When you connect a third-party service:
- • We use industry-standard OAuth 2.0 protocols with PKCE for secure authentication.
- • Your credentials are encrypted using AES-256 encryption and stored securely.
- • Data exchanged with third-party services is subject to those services' privacy policies.
- • You can revoke access to any connected service at any time through your account settings.
- • We request only the minimum permissions necessary for your workflows to function.
6. Google API Services Disclosure
US Tech Automations' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Data We Access from Google Services
When you connect your Google account, we may access the following data based on your authorized permissions:
- • Gmail: Email messages, metadata, labels, and settings for sending/reading emails in your workflows
- • Google Sheets: Spreadsheet data, formatting, and metadata for reading/writing data
- • Google Calendar: Calendar events, availability, and settings for scheduling automations
- • Google Drive: Files, folders, and metadata for document management workflows
- • Google Docs: Document content and metadata for document creation and editing
- • Basic Profile: Your email address and basic profile information for account identification
How We Use Google User Data
We use Google user data exclusively to:
- • Execute the automated workflows you create and configure
- • Display relevant data within our Platform interface
- • Authenticate your identity and maintain your session
- • Troubleshoot issues and provide customer support when you request assistance
Limited Use Disclosure
US Tech Automations' use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:
- • We will only use access to read, write, modify, or control Google user data for the purposes described in this policy and necessary to provide the Services.
- • We will not transfer Google user data to third parties except as necessary to provide the Services, with user consent, for legal reasons, or as part of a merger/acquisition with user notice.
- • We will not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- • We will not allow humans to read Google user data unless: (a) we have your explicit consent, (b) it is necessary for security purposes, (c) it is necessary to comply with applicable law, or (d) our use is limited to internal operations with aggregated and anonymized data.
Data Storage & Security
- • OAuth tokens and credentials are encrypted using AES-256 encryption at rest
- • All data transmission uses TLS 1.3 encryption
- • Access tokens are refreshed automatically and securely stored
- • We do not permanently store the content of your emails, documents, or files unless required for your configured workflows
Revoking Access
You can revoke US Tech Automations' access to your Google data at any time by:
- • Disconnecting the integration in your US Tech Automations account settings
- • Visiting Google Account Permissions and removing access for US Tech Automations
7. Data Security
We implement comprehensive security measures to protect your data:
- Encryption: AES-256 encryption for data at rest; TLS 1.3 for data in transit.
- Access Controls: Role-based access control (RBAC), multi-factor authentication (MFA), and single sign-on (SSO) support.
- Infrastructure: Zero-trust architecture, network isolation, DDoS protection, and Web Application Firewall (WAF).
- Monitoring: 24/7 security monitoring, comprehensive audit logging, and real-time threat detection.
- Compliance: SOC 2 Type II certified, ISO 27001, GDPR, CCPA, HIPAA, and PCI DSS compliant.
- Disaster Recovery: Automated backups, geo-redundant storage, RTO of 4 hours and RPO of 1 hour.
While we implement industry-leading security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information.
8. Data Retention
- Account Data: Retained while your account is active and for up to 30 days after account deletion to allow for reactivation.
- Workflow Data: Retained while your account is active. Execution logs are retained for 90 days by default (configurable for Enterprise plans).
- Billing Records: Retained for 7 years as required by tax and accounting regulations.
- Audit Logs: Retained for 1 year minimum for security and compliance purposes.
- Inactive Accounts: Accounts inactive for 24 months may be scheduled for deletion after notice.
You may request deletion of your data at any time by contacting us. Certain data may be retained as required by law or for legitimate business purposes.
9. Your Privacy Rights
Depending on your location, you may have the following rights:
For All Users:
- • Access: Request a copy of your personal information.
- • Correction: Request correction of inaccurate information.
- • Deletion: Request deletion of your personal information.
- • Opt-Out: Unsubscribe from marketing communications.
- • Portability: Request your data in a portable format.
Additional Rights for California Residents (CCPA/CPRA):
- • Right to know what personal information is collected, used, and shared.
- • Right to opt-out of the sale or sharing of personal information (we do not sell your data).
- • Right to non-discrimination for exercising your privacy rights.
- • Right to limit use of sensitive personal information.
Additional Rights for EU/EEA Residents (GDPR):
- • Right to object to processing based on legitimate interests.
- • Right to restrict processing in certain circumstances.
- • Right to lodge a complaint with a supervisory authority.
- • Right to withdraw consent at any time.
To exercise your rights, contact us at privacy@ustechautomations.com. We will respond within 30 days (or 45 days for complex requests).
11. International Data Transfers
US Tech Automations is based in the United States. Your information may be transferred to, stored, and processed in the United States or other countries where we or our service providers operate.
For transfers from the EU/EEA, UK, or Switzerland, we use:
- • Standard Contractual Clauses (SCCs) approved by the European Commission
- • Data Privacy Framework certification (where applicable)
- • Additional supplementary measures as required
Enterprise customers may choose data residency options to keep data within specific regions.
12. Children's Privacy
Our Services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at privacy@ustechautomations.com, and we will take steps to delete such information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date, and for significant changes, we will provide additional notice via email or Platform notification. Your continued use of our Services after changes become effective constitutes acceptance of the revised policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
US Tech Automations, LLC
Attn: Privacy Team
Phoenix, Arizona, USA
Have Questions?
Our team is here to help with any privacy-related questions or concerns.