Privacy Policy

Introduction

Fira ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workflow automation platform and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

Information We Collect

Information You Provide

• Account Information: Name, email address, password, and organization details when you register.
• Payment Information: Billing address and payment method details processed securely through our payment providers.
• Workflow Data: The workflows, configurations, and automation logic you create using our platform.
• Integration Credentials: API keys and authentication tokens for third-party services you connect.
• Communications: Information you provide when contacting our support team or participating in surveys.

Information Collected Automatically

• Usage Data: Workflow execution logs, feature usage, and interaction patterns.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Cookies: Session cookies, preference cookies, and analytics cookies (see Cookie Policy below).

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Process transactions and send related information
• Send administrative information, updates, and security alerts
• Respond to your comments, questions, and support requests
• Analyze usage patterns to improve our Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms

Data Processing for AI Features

When you use AI-powered features in your workflows, data may be processed by third-party AI providers (such as OpenAI, Anthropic, or Google) according to their respective privacy policies. We recommend reviewing these policies before using AI features with sensitive data.

Important: Your workflow data is never used to train AI models. We process data only to execute your workflows as configured.

Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in operating our Service (hosting, analytics, payment processing).
• Integration Partners: Third-party services you explicitly connect to your workflows.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Data Security

We implement industry-standard security measures to protect your data, including:

• End-to-end encryption for data in transit (TLS 1.3)
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• SOC 2 Type II certified infrastructure
• Role-based access controls and audit logging

For more details, please visit our Security page.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Service. Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required for legal or legitimate business purposes.

Workflow execution logs are retained for 90 days by default. Enterprise customers can configure custom retention periods.

Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing

To exercise these rights, contact us at privacy@firaflow.io.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission for transfers from the EEA.

Cookie Policy

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly.
• Analytics Cookies: Help us understand how you use our Service.
• Preference Cookies: Remember your settings and preferences.

You can manage cookie preferences through your browser settings.

Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: