Legal
Privacy Policy
Last updated: June 29, 2026
Connecto's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Overview
Connecto provides managed workflow automation, app integrations, AI-assisted workflow features, and operational dashboards for customers who authorize us to connect their business tools.
This Privacy Policy explains what information we collect, how we use it, how we share it, and how users can request deletion or access changes.
Information we collect
Account and contact information, such as name, email address, organization name, and information submitted through contact or onboarding forms.
Workspace and organization information needed to configure customer accounts, allowed connections, workflows, dashboards, environments, and invitations.
Connected app metadata, such as connection status, provider name, account identifiers, scopes granted, token health, webhook status, and workflow configuration.
Workflow runtime information, such as run status, step status, timestamps, retry state, error messages, audit metadata, and business metrics generated by workflows.
Support and communication information, such as messages sent to Connecto, workflow requirements, implementation notes, and support requests.
Google user data
When a customer connects a Google account, Connecto may request access to Google APIs such as Gmail, Google Sheets, Google Drive, or Google Calendar, depending on the workflow the customer has approved.
Examples of Google user data Connecto may access include email sending permissions, email drafts or message data when explicitly authorized, spreadsheet data, selected Drive file metadata or content, and calendar event data.
Connecto uses Google user data only to provide and improve the customer-facing workflow, integration, automation, AI-assisted task, or dashboard feature that the customer requested.
Connecto does not sell Google user data, use Google user data for advertising, transfer Google user data to data brokers, or use Google user data to determine creditworthiness or lending eligibility.
Connecto does not use Google user data to train generalized AI or machine learning models. If an AI-assisted workflow is configured, Google user data is processed only to provide the requested user-facing workflow feature, such as summarization, classification, drafting, routing, or extraction.
How we use information
Connecto uses information to authenticate users, configure organizations, connect approved third-party apps, run workflows, display dashboard metrics, monitor workflow health, troubleshoot failures, improve reliability, communicate with customers, and comply with legal obligations.
We request the minimum permissions we reasonably need for a configured workflow. If a new workflow requires additional access, the customer may need to approve additional scopes or reconnect the relevant app.
How we share information
Connecto may share information with service providers that help us operate the service, such as hosting, database, authentication, email delivery, workflow runtime, observability, AI processing, and integration credential providers.
These providers are used only to deliver, secure, monitor, or improve Connecto. We do not sell personal information or connected app data.
We may disclose information when required by law, to protect Connecto and our customers, to investigate security issues or abuse, or as part of a business transfer with appropriate notice where required.
Connected app credentials
Connecto may use Nango or similar integration infrastructure to store and manage third-party app credentials and tokens. Connecto uses those credentials only to access the connected app features authorized by the customer.
Customers can disconnect integrations from the Connecto dashboard or by revoking access directly in the connected third-party app.
Retention and deletion
Connecto retains account, organization, workflow, dashboard, log, metric, and support information for as long as needed to provide the service, maintain records, troubleshoot workflows, comply with legal obligations, and protect against abuse.
Runtime logs and audit metadata may be retained to help customers understand what ran, what failed, and what business result was produced.
Customers may request deletion of account data, connected app metadata, workflow logs, and stored customer data by contacting us. Some records may be retained where required for security, legal compliance, billing, or dispute resolution.
Security
Connecto uses reasonable technical and organizational safeguards designed to protect information in transit and at rest. No system can be guaranteed to be completely secure.
Customers are responsible for granting appropriate permissions, maintaining their own third-party accounts, and ensuring that workflow recipients and contacts have provided any consent required by applicable law.
Children
Connecto is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes
Connecto may update this Privacy Policy from time to time. If we materially change how we use connected app data or Google user data, we will update this page and take additional steps where required.
Contact
For privacy questions, access requests, or deletion requests, contact Connecto through the contact page.