Last updated: October 21, 2026
This Privacy Policy explains how n8n Workspace (“we”, “us”, “our”) collects, uses, stores and shares information when you use the website at n8nworkspace.website and the private workflow-automation services hosted on it (the “Service”), including integrations that connect to Google accounts.
Who we are
n8n Workspace is a privately operated, self-hosted automation service. The Service runs on infrastructure we control and is used to automate tasks for its owner and authorized users. It is not offered as a public commercial product.
Information we collect
- Google account data you authorize. When you connect a Google account through Google OAuth, the Service may access the data covered by the permissions you approve. Depending on the workflow, this may include Gmail message metadata and content (sender, recipients, subject, date, body) and Google Sheets spreadsheets you choose to use.
- OAuth tokens. Access and refresh tokens issued by Google, which let the Service act on your behalf within the permissions you granted.
- Website data. Standard server and security logs (such as IP address, browser type and pages requested) generated when you visit the website.
How we use Google user data
Google user data is used only to provide the automation features you have set up and authorized, for example:
- Reading new Gmail messages so they can be summarized, categorized and prioritized.
- Adding a row with that summary to a Google Sheets spreadsheet you select.
- Sending a notification for messages flagged as urgent to a Slack or Discord channel you configure.
We do not use Google user data for advertising, sell it, use it to build user profiles for unrelated purposes, or allow humans to read it except (a) with your explicit consent, (b) where necessary for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) when the data has been aggregated and anonymized for internal operations.
Google API Services User Data Policy
n8n Workspace’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How information is shared
We share information only as needed to perform the features you authorized:
- AI processing (Anthropic). Email content may be sent to the Anthropic Claude API to generate a summary and classification. Anthropic processes this data under its commercial terms and does not use API inputs or outputs to train its models. Google user data is never used to develop, improve or train generalized AI or machine-learning models.
- Notification services. If you enable alerts, a short summary of an urgent message (sender, subject, summary and a link) is posted to the Slack workspace or Discord channel you choose.
- Infrastructure providers. Website traffic passes through Cloudflare for security and delivery.
- Legal requirements. We may disclose information if required by law or to protect the rights, property or safety of the Service or others.
We do not sell or rent personal information to anyone.
Data storage, retention and security
- The Service runs on a privately operated server. Access to administrative systems is restricted and protected by authentication and a private VPN.
- OAuth credentials are stored encrypted in the automation platform.
- Workflow execution records, which may include processed email data, are automatically deleted after 72 hours.
- Output written to Google Sheets stays in your own Google account, under your control, until you delete it.
- All connections to Google, Anthropic and other providers use encrypted HTTPS/TLS connections.
No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
Your choices and rights
- You can revoke the Service’s access to your Google account at any time at myaccount.google.com/permissions. Revoking access stops all further data collection.
- You can ask us to delete any stored data or credentials associated with you by contacting us at the address below. We will act on verified requests within 30 days.
- Depending on where you live, you may have additional rights to access, correct or delete your personal information. Contact us to exercise them.
Children’s privacy
The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.
Changes to this policy
We may update this Privacy Policy from time to time. Changes take effect when posted on this page, and the “Last updated” date above will be revised.
Contact
Questions or requests about this Privacy Policy: [email protected]