Privacy policy

Vita Verification Pte. Ltd. (UEN 202021433K, Singapore; “we”, “us”) runs this website and the app at app.n8n.prod.site (“the app”), where you connect your workflows and get them back fixed and tested. We decide how the personal data described here is used, so we are its controller.

You can reach us about anything in this policy at roshan@lunox.work, or by post at 400 Balestier Road, #05-01, Balestier Plaza, Singapore 329802.

The website collects nothing about you. It sets no cookies and runs no analytics, advertising or tracking scripts.

If you switch between light and dark, your choice is saved in your own browser’s local storage so the page remembers it. It never leaves your device. Our host, Amazon Web Services, receives the standard details of each request (such as your IP address and browser) in order to deliver the page and protect it from abuse.

• Your account. When you sign in with Google, GitHub or Atlassian, we receive your name, email address and profile picture from them. We never see your password for those services.
• Your sessions. A session cookie keeps you signed in. For each session we record its IP address and browser so you and we can spot sign-ins that are not yours.
• Your connections. When you connect n8n, we read the workflows on the instance you connect so we can find where they fail. The secret values of credentials stored in n8n stay there: we do not read or copy them. If you connect GitHub, we can read only the repositories you pick, and only their contents; if you connect Jira, we can read only its issues. The access tokens these connections issue are encrypted before they are stored.
• What you upload. Workflow export files you drop into the app.
• What you tell us. Your messages in the app, the descriptions of your projects, and the quotations and fixes that come out of them.
• Test data. We test fixes only against sandboxes or test data you approve.
• Payments. The app takes no payments yet. When it does, a payment processor will handle your card details, we will not store them, and we will name the processor here first.

Only to run the service you asked for:

• to sign you in and keep your account secure;
• to read your workflows, find where they break, and price each fix;
• to build the fixes and the tests that prove them, and return them to your n8n or hand them over as code you own;
• to answer you when you write to us; and
• to meet our legal obligations.

We use it because you asked us to do this work (performing our contract with you), because keeping the service secure is in our and your legitimate interest, or because the law requires it. We do not sell your data, show you ads, or build profiles of you.

The app uses Anthropic’s Claude models to understand what you describe and to analyse the workflows and project content you share. That content is sent to Anthropic to be processed, under commercial terms that do not allow Anthropic to train its models on it.

These services process data on our behalf, or because you chose to connect them:

Beyond these, we share personal data only when the law requires it, to protect someone’s safety or rights, or with a buyer if the business is sold, who would then be bound by this policy.

Our servers run in Amazon Web Services’ US East region, and our providers process data mainly in the United States. If you are outside the US, your data is transferred there. Where the law asks for it, we rely on safeguards such as the European Commission’s standard contractual clauses for those transfers.

• Your account, for as long as it is open.
• Projects and their conversations, until you delete them in the app or close your account.
• Connection tokens, until you disconnect the tool or close your account.
• Server logs, for 30 days.
• Deleted data can linger in database backups for a short time before they roll off.

Data travels encrypted (TLS) between your browser, the app and our database. Access tokens for your connected tools are encrypted at rest with AES-256-GCM under a key kept apart from the database, so a copy of the database alone would not open your tools. Connections ask for read access only, and only to what you choose. No system is perfectly secure; if a breach ever affects your data, we will tell you and the authorities as the law requires.

Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, or send you a copy you can take elsewhere. You can object to how we use it or ask us to limit it, and you can disconnect a tool at any time. If you are in the EU or UK, you can also complain to your data protection authority.

To use any of these rights, or to close your account and have its data deleted, email roshan@lunox.work. We answer within 30 days. We do not sell or share personal data for advertising, as California law defines those terms.

The service is for businesses and is not meant for anyone under 16. We do not knowingly collect their data, and we delete it if we learn we have.

When we change this policy we update the date at the top. If a change matters to how your data is used, we tell you by email or in the app before it takes effect.