Privacy Policy

PacketLeaf ("we", "us", or "our") operates Leaf Loom, an automation reliability monitoring service. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service. By using Leaf Loom, you agree to the practices described in this policy.

Information We Collect

We collect information in the following ways:

Account information. When you register, we collect your name, email address, and a hashed version of your password. We do not store your password in plain text.

Webhook payload data. When your automations send data to Leaf Loom, we store the workflow name, run status, duration, platform identifier, error messages, and any custom key value pairs you include. This data is used solely to generate your reliability reports.

API key activity. We record when each API key was last used so you can audit access to your account.

Usage data. We may collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This helps us maintain and improve the service.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Leaf Loom service
• Generate reliability scores, grades, and trend reports for your automations
• Send transactional emails such as account verification and password resets
• Respond to support requests and inquiries
• Monitor and improve the security and performance of the service
• Comply with legal obligations

We do not sell your data. We do not use your webhook payload data to train machine learning models or share it with third parties for marketing purposes.

Data Storage and Security

Your data is stored in a PostgreSQL database hosted in a secure cloud environment. We use industry standard encryption in transit (TLS) and at rest. API keys are stored and compared as generated tokens and are not reversible to your account credentials.

While we take reasonable precautions to protect your data, no system is completely secure. We encourage you to use a strong, unique password and to rotate API keys if you suspect they have been compromised.

Third Party Services

We use a limited number of third party services to operate Leaf Loom:

• Email delivery providers for sending transactional emails. Emails are sent via SMTP and contain only the information needed to complete the action you requested.
• Anthropic Claude for AI powered features within the product.
• Cloud infrastructure providers for hosting and database services.

Each of these providers has their own privacy policies and data handling practices. We select providers that meet appropriate data protection standards.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your automation execution data
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

Data Retention

We retain your account data for as long as your account is active. Webhook execution records are retained for up to 3 years by default. If you delete your account, we will remove your personal data and execution records within 30 days, except where retention is required by law.

Children

Leaf Loom is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you by email or by a notice within the dashboard. Continued use of Leaf Loom after a change constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out to us at privacy@packetleaf.com. We take privacy concerns seriously and will respond promptly.