GDPR Compliance

Your rights under GDPR

As an EU or UK resident, you have the right to:

• Access: request a copy of the data we hold about you.
• Rectify: update or correct your personal information.
• Erase: request deletion of your account and all personal data.
• Restrict processing: ask us to pause processing your data.
• Data portability: export your data in a portable format.
• Object: opt out of certain types of data processing.

To exercise these rights, email us at hello@n8nitro.com.

Data processing

• What we process: account info (name, email), usage logs, and support files.
• Why we process it: to provide and improve the service, support your account, and maintain security.
• Legal basis: processing is based on your consent and our legitimate interest to operate the service.

Data transfers

• We may store data outside the EU/UK (e.g., Supabase servers).
• All providers we use follow GDPR-compliant contracts (Standard Contractual Clauses or equivalent safeguards).

Third-party providers

We rely on trusted third parties to deliver N8Nitro:

• Supabase (database, authentication, storage)
• Coolify (deployment infrastructure)
• Resend (transactional emails)

They only process data on our behalf and do not use it for their own purposes.

Data retention

• We keep your personal data while you have an active account.
• When you close your account, we delete personal data within 30 days, unless required by law to keep it longer.

Security

• Encrypted traffic (SSL/TLS).
• Encrypted passwords (bcrypt).
• Optional 2FA for extra protection.

Contact

If you have any questions about GDPR or your rights, please contact N8Nitro at hello@n8nitro.com.

If you are not satisfied, you also have the right to lodge a complaint with your local Data Protection Authority.