Beta privacy notice

Scope

AutomatePal is a development sandbox. Do not enter real customer details, payment credentials or sensitive business data.

Use fictional data only. This beta is not intended for production use.

Sign-in and account data

If you use Google sign-in, your email, name and basic profile information are used for authentication through Supabase Auth. We do not request access to Gmail, Google Drive or your Google Calendar. Account email and login data are handled by Supabase Auth.

Workspace and knowledge data

Widget settings, fictional support requests and any explicitly consented demo contact address are stored in your workspace. Knowledge source text and chunks are stored in Supabase. Recorded sandbox activity, demo events and action proposals are stored in Supabase Postgres, and access is restricted to your account.

Import-attempt history contains source IDs, status and timestamps, with at most 100 records retained per workspace; failed attempts without a saved source remain in this bounded history. Exact custom responses are stored separately and can be removed separately. Demo links expire after one hour; this does not automatically delete stored requests.

AI processing

Your chat requests may be sent to Google Gemini for response generation. Text is sent to Gemini for embeddings and source-based answers only after processing consent; published sources may be quoted to anyone holding your unexpired demo link.

Free-tier Gemini content may be used by Google to improve its products. Upload public or fictional content only. Published exact responses are returned verbatim without a model check; other knowledge questions may be sent to Gemini.

Service providers

Account email and login data are handled by Supabase Auth. Sandbox API calls are sent to PayPal. Hosting is provided by Render.

The full list, with what each provider does and where it runs, is on the security page.

Browser storage

AutomatePal does not use advertising or analytics cookies, and loads no third-party trackers. Your browser keeps only what the app needs to work:

• your sign-in session, kept by Supabase Auth in local storage;
• guided-setup progress and which notifications you have read, in local storage;
• a Q&A draft you hand from a resolved ticket to the Knowledge page, in session storage, which clears when the tab closes;
• whether the support widget is open, in session storage on the site where the widget is embedded.

Signing out ends the session. Clearing this site's data in your browser removes the rest.

Deletion and retention

Removing a source deletes its stored text, chunks and source-linked import-attempt history and stops future retrieval. It cannot recall answers already seen or exported, stored question analytics or provider-held data.

The integrations page has a confirmed preview-data deletion control and metadata-only owner audit history (up to 1000 events). This removes application data but not the sign-in account, provider-held data, exports or backups. Uncertain/executing actions block deletion. There is no automatic age-based purge.

To request account or stored-activity deletion, contact raviteja@automatepal.com from your account email. Deletion is handled manually; no completion time is promised. Do not use this beta if those limitations are unsuitable.

Payment information

No real payment information should be collected by AutomatePal. Never paste API keys, card numbers or PayPal passwords into chat.

Contact

Questions about this notice go to the address on the contact page. See also the beta terms.