Workflow Automation ("we," "us," or "our") operates workflowautomation.net (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. Please read this policy carefully. By using the Site, you consent to the practices described herein.
1. Information We Collect
1.1 Information You Provide Voluntarily
We collect personal information that you voluntarily provide when you:
- Subscribe to our newsletter: Email address, and optionally your first name. We use ConvertKit as our email service provider.
- Submit a software review: Name, email address, job title, company name, company size, and your review content.
- Use our Software Finder tool: Your preferences and requirements (industry, team size, budget). No personally identifiable information is collected unless you voluntarily provide your email for results.
- Use our ROI Calculator: Business metrics you input (hours, rates, team size). This data is processed client-side and is not sent to our servers unless you choose to download a report with your email.
- Submit a vendor claim: Name, work email, role, company name, and the software you wish to claim.
- Contact us: Name, email address, and the content of your message.
1.2 Information Collected Automatically
When you visit our Site, certain information is collected automatically:
- Log data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and time spent on pages.
- Device information: Device type, screen resolution, language preferences, and unique device identifiers.
- Cookies and similar technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing behavior. See Section 4 for details.
- Analytics data: Page views, click patterns, scroll depth, and interaction data collected through Google Analytics and Vercel Analytics.
1.3 Information from Third Parties
We do not purchase or obtain personal information from data brokers. However, if you sign up through a third-party integration (e.g., a partner website linking to our newsletter), we may receive your email address from that referral source.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Newsletter delivery: To send our weekly Automation Digest newsletter, including new reviews, software deals, automation tips, and workflow templates. You can unsubscribe at any time.
- Site improvement: To understand how visitors use our Site, identify popular content, and improve user experience.
- Content personalization: To provide relevant software recommendations through our Software Finder tool.
- Communication: To respond to your inquiries, support requests, and vendor claim submissions.
- Review moderation: To verify and publish user-submitted software reviews.
- Analytics and reporting: To generate aggregate, non-identifiable statistics about Site usage.
- Legal compliance: To comply with applicable laws, regulations, and legal processes.
3. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data under the following legal bases:
- Consent: When you subscribe to our newsletter or submit a review, you provide explicit consent for us to process your data for those purposes.
- Legitimate interest: We process analytics data and usage information based on our legitimate interest in improving our Site and services, balanced against your privacy rights.
- Contractual necessity: When you use our tools or submit a vendor claim, processing is necessary to provide the requested service.
- Legal obligation: We may process data when required by law.
4. Cookies and Tracking Technologies
4.1 Types of Cookies We Use
- Essential cookies: Required for basic Site functionality (e.g., theme preference, session management). These cannot be disabled.
- Analytics cookies: Used by Google Analytics (GA4) and Vercel Analytics to collect aggregate usage data. These help us understand traffic patterns and content performance.
- Affiliate tracking cookies: When you click affiliate links on our Site, the destination software vendor may place cookies on your device to track the referral. These are third-party cookies governed by the vendor's privacy policy.
4.2 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may affect Site functionality. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.
5. Third-Party Services and Data Processors
We share data with the following third-party services that act as data processors on our behalf:
- Vercel (hosting and analytics) — Processes server logs, deployment data, and web analytics. Vercel Privacy Policy
- Sanity.io (content management) — Stores and serves our content including reviews, guides, and user-submitted data. Sanity Privacy Policy
- ConvertKit (email marketing) — Processes newsletter subscriptions, sends emails, and tracks open/click rates. ConvertKit Privacy Policy
- Google Analytics (web analytics) — Collects anonymized usage data including page views, session duration, and user demographics. Google Privacy Policy
- GitHub (source code hosting) — Hosts our codebase. Does not process user data directly.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
6. Affiliate Links and Sponsored Content
Our Site contains affiliate links to software products we review. When you click these links:
- You are redirected to the software vendor's website
- The vendor may place cookies on your device to track the referral
- If you make a purchase, we may receive a commission at no additional cost to you
- Affiliate tracking is governed by each vendor's privacy policy, not ours
We clearly mark affiliate relationships. For full details, see our Affiliate Disclosure.
7. Data Retention
- Newsletter subscribers: We retain your email address until you unsubscribe. Upon unsubscription, your email is removed from active lists within 30 days, though anonymized analytics data may be retained.
- User reviews: Published reviews are retained indefinitely as part of our content. You may request removal by contacting us.
- Vendor claims: Claim data is retained for the duration of the vendor relationship. Rejected claims are deleted after 90 days.
- Analytics data: Google Analytics data is retained for 14 months. Vercel Analytics data follows Vercel's retention policy.
- Contact form submissions: Retained for 12 months after resolution.
8. Your Rights
8.1 Rights for All Users
- Unsubscribe: Every newsletter email contains a one-click unsubscribe link.
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may request correction of inaccurate personal data.
- Deletion: You may request deletion of your personal data, subject to legal retention requirements.
- Opt-out of analytics: You can disable analytics tracking via browser settings or the Google Analytics opt-out add-on.
8.2 Additional Rights for EEA/UK Residents (GDPR)
- Data portability: You may request your data in a structured, machine-readable format.
- Restriction of processing: You may request that we limit how we use your data.
- Object to processing: You may object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Lodge a complaint: You have the right to lodge a complaint with your local data protection authority.
8.3 California Privacy Rights (CCPA)
California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us using the information below.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- HTTPS encryption for all data in transit
- Access controls limiting who can access personal data
- Regular security updates to our infrastructure
- Secure API tokens for third-party integrations
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
10. International Data Transfers
Our Site is hosted on Vercel's global infrastructure. If you access the Site from outside the United States, your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where applicable.
11. Children's Privacy
Our Site is not intended for children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page and update the "Last updated" date. For significant changes, we may also notify newsletter subscribers via email.
13. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:
- Via our contact form
- By email: privacy@workflowautomation.net
We aim to respond to all privacy-related requests within 30 days.