Effective date: 19 October 2026 · Last updated: 19 October 2026

AutoFlow is built to work on your device first. This policy explains, in plain language, what information the AutoFlow apps for Windows and Android, the AutoFlow web app and this website process, why, for how long, and the rights you have.

1. Who is responsible

The controller of personal information processed through AutoFlow is ProjectTeamForYou (프로젝트팀포유; representative: Yusang Lee; business registration no. 495-25-02209; mail-order business report no. 제2026-경북봉화-0037호; 1166-68 Yebong-ro, Sangun-myeon, Bonghwa-gun, Gyeongsangbuk-do, Republic of Korea; phone +82-70-7620-7256). Our privacy officer is Yusang Lee (representative). You can reach us, including our privacy officer, at [email protected].

2. The short version

Your flows, recordings, Keyforge profiles and run logs are stored and processed on your device.
An account is optional. If you create one, we store your email address and a password hash.
Sync is end-to-end encrypted. Our server stores ciphertext that we cannot read.
AI keys stay encrypted on your device and are sent only to the AI provider you choose.
No ads, no tracking cookies, no analytics profiles and no sale of personal information.

3. Data that stays on your device

Flows, variables, recordings, screenshots used for image search, OCR results, Keyforge profiles, Ledger run logs, settings and Copilot conversations are created and processed locally. They are not sent to us unless you explicitly sync them, publish them or share them as described below.

You can delete this data at any time by deleting the item, clearing the app’s data or uninstalling the app.

4. Optional account

If you create an account, we process:

your email address, to identify your account, sign you in and send essential service messages (for example password reset);
a password hash created with a modern, salted one-way algorithm — we never store or see your password itself;
session tokens, account creation time and the devices signed in to your account, to keep the service secure.

We use this information only to provide the account and sync service. We do not send marketing email.

5. End-to-end encrypted sync

When sync is on, each flow is encrypted on your device with AES-GCM using a key that never leaves your devices in readable form. Our server stores only the ciphertext together with technical metadata needed for sync: an item identifier, revision number, content hash, size and timestamps.

We cannot read, scan or recover the contents of synced flows. If you lose access to all of your devices and your encryption key, the encrypted data cannot be restored.

6. Atlas public templates

If you publish a template to Atlas, the template, its description, your chosen display name and the publication date become public. Before publication the server validates the template, checks it for errors and assigns a risk label. Ratings and reports you submit are stored with your account so we can prevent abuse.

You can unpublish your templates at any time. Copies that others already downloaded remain on their devices.

8. Copilot and your AI keys

Copilot works with an AI provider you choose (for example an OpenAI-compatible service, Anthropic, or a local model such as Ollama or LM Studio). Your API key is stored on your device only, encrypted (WebCrypto non-extractable key in the browser, Windows Credential Manager, Android Keystore).

Prompts and the context you approve are sent directly from your device to that provider. We never receive your keys, prompts or responses. Before sending, Copilot shows what will be sent and where. The provider’s own privacy policy applies to what it receives. In local-only mode, external calls are blocked.

9. Android: Accessibility service disclosure

AutoFlow for Android uses the Android AccessibilityService API because it is the only way Android lets an app perform taps, swipes and global actions on your behalf. We use it to:

perform the gestures and global actions (such as Back or Home) contained in the flows you run;
read text on the screen only while a flow is running and only when a step you added requires it (for example “wait until this text appears”);
detect which app is in the foreground, only to start flows with app-based triggers you configured.

The service does not collect, store, share or transmit personal or sensitive data, does not record what you type, does not read password fields and is not used for advertising. It is off until you turn it on, and you can turn it off at any time in Settings › Accessibility. AutoFlow also asks for the overlay permission (to show the floating stop button) and the notification permission (to show run status), both of which you control.

10. Windows: input hooks disclosure

To provide global hotkeys, Keyforge remapping and the recorder, AutoFlow for Windows installs low-level keyboard and mouse hooks while those features are enabled. Input events are processed in memory on your PC to detect your shortcuts and remaps; they are not logged and are never transmitted.

The recorder captures input only while recording is on and the recording indicator is visible. Text entered into password fields is masked in recordings.

11. This website and the web app

We do not use tracking cookies, advertising pixels or third-party analytics. The website stores your theme and language choice in your browser’s local storage; this never leaves your device. The web app stores your flows in your browser’s storage (IndexedDB).

Our hosting provider processes technical data such as IP address, browser type and requested URL to deliver pages and protect against attacks. These logs are kept for a short period for security purposes only.

12. No ads, no sale of data

AutoFlow contains no advertising. We do not sell, rent or share personal information for cross-context behavioural advertising, and we do not build profiles about you.

13. Service providers

We use a small number of providers that process data on our behalf under contractual confidentiality and security obligations:

Cloudflare, Inc. — website and web app hosting, content delivery and attack protection;
Railway Corporation — hosting of the AutoFlow API and database (account data, encrypted sync data, Atlas).
Downloads are provided through GitHub (Windows) and Google Play (Android); those services process your data under their own privacy policies.
PortOne (Korea PortOne Inc.) and NHN KCP Corp. — card payments in Korean won for the Business plan; PayPal — payments in other currencies. They receive the payment details you enter on their pages; we receive only the payment result (amount, status, payment ID and your account email), never your card number.

14. International transfers

Our providers may process data in the United States and other countries outside your own. Where the law requires it, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, and we inform you of transfers as required by Korean and Japanese law. Synced flows are encrypted before they leave your device.

15. How long we keep data

Account data: for as long as your account exists.
Encrypted sync data: until you delete the item or your account.
After account deletion: removed from active systems immediately and from backups within 30 days.
Atlas templates: until you unpublish them or delete your account; abuse reports for up to one year.
Security logs: up to 30 days, unless needed longer to investigate a specific incident.
Payment records (Business plan orders): 5 years, as required by the Korean Act on Consumer Protection in Electronic Commerce — also after account deletion — and then deleted.

16. Your rights

Depending on where you live, you have the right to access, correct, delete, export (portability), restrict or object to the processing of your personal information, and to withdraw consent at any time. You can export every flow from the app at any time and delete your account in the app’s settings. For anything else, email [email protected]. We answer within 30 days and may ask you to verify your identity. We will never treat you differently for exercising your rights.

18. Republic of Korea (PIPA)

Items collected: email address and password hash (required for an account); encrypted sync data and service logs. Purpose: account management, sync and security. Retention and destruction: as in section 15; electronic files are deleted using methods that make them unrecoverable. We do not provide personal information to third parties except as described in this policy or required by law, and overseas transfers are described in sections 13–14. Privacy officer: ProjectTeamForYou, [email protected].

For help with privacy infringements you may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833‑6972).

19. Japan (APPI)

We use personal information only for the purposes stated in this policy and do not provide it to third parties without consent except as permitted by law. Information about the providers we use and the countries where data is processed is set out in sections 13–14. You may request disclosure, correction, suspension of use or deletion of your retained personal data by contacting [email protected].

20. Brazil (LGPD)

We process data on the legal bases of contract performance, legitimate interest and consent. You may exercise the rights under Article 18 of the LGPD — confirmation, access, correction, anonymisation, portability, deletion, information about sharing and withdrawal of consent — by contacting our data protection contact at [email protected]. You may also file a complaint with the ANPD.

21. California (CCPA / CPRA)

In the past 12 months we have collected identifiers (email address) and internet activity limited to security logs, for the business purposes described above. We do not sell or share personal information and do not use sensitive personal information to infer characteristics. You have the right to know, delete and correct your information and to not be discriminated against for using these rights. You may use an authorised agent; we will verify requests before acting on them.

22. Security

TLS encryption for all network traffic and strict security headers on our sites;
end-to-end encryption of synced flows and on-device encryption of AI keys;
salted password hashing, rate limiting and protection against automated attacks;
least-privilege access to production systems and regular dependency updates.

No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as required by law.

23. Children

AutoFlow is not directed at children under 13. You must be at least 13 to create an account — or at least 16 in the EEA and the UK (or the lower age of digital consent in your country), and at least 14 in Korea — unless a parent or legal guardian consents. If we learn that we hold an account of a child without required consent, we will delete it.

24. Changes to this policy

We will post any changes on this page and update the effective date. If a change materially affects how we use your information, we will announce it in the app or by email before it takes effect.

25. Contact

ProjectTeamForYou · [email protected]

Privacy Policy