Privacy Policy

What we collect

Account details: your name and email address, and your sign-in method (email and password, or Google).

What you build and store in Alur: workflows, tables and rows, forms and their submissions, scheduling pages and bookings, uploaded media, and the run history of your workflows.

Connection credentials: API keys and similar secrets you add for other services. These are stored encrypted.

Basic technical data, such as session cookies and server logs, needed to keep you signed in and keep the service running.

How we use it

We use your data to provide Alur: to sign you in, run your workflows, show you your runs, and keep the service secure and working. We do not sell your data.

Third-party services

When a workflow uses a service you connected, such as email, payments, social posting or AI, the data that step needs is sent to that provider under your credentials and is handled under their terms and privacy policy.

If you sign in with Google, Google shares your basic profile (name and email) with us.

Video calls on bookings run on Cloudflare RealtimeKit. The audio and video travel through Cloudflare while the call is live, together with the display name each person enters and an anonymous participant ID; email addresses are not sent. Calls are not recorded or stored.

Where your data lives

Each user's data is kept in its own separate space in our database, and uploaded media is kept in file storage. Access is limited to what is needed to run and support the service.

Retention and deletion

We keep your data while your account is active. You can delete items such as workflows and tables yourself, and delete your whole account in Settings → Profile. A deleted account can be restored for 30 days and is then deleted for good; the Account deletion page explains what is removed and what is kept.

Cookies

We use cookies only to keep you signed in and remember basic preferences, such as your language.

Changes

We may update this policy. The date above shows the latest version.