Privacy notice
What information NodeHub handles, why it is needed, where it is kept and how to ask about your data.
Side By Tech LLC d/b/a NodeHub · 159 Pleasant Ave, Rochester, NY 14622, United States
Privacy: [email protected] · Support: [email protected]
Who we are and who this covers
NodeHub is operated by Side By Tech LLC d/b/a NodeHub ("NodeHub", "we", "us"), a New York limited liability company. This notice covers people who visit nodehub.dev, contact us, create an account, administer a workspace or buy a subscription. For that information we decide how it is used.
Organizations use NodeHub to run customer support and workflows. The conversations, contacts, files, tables and workflow data they place in their workspace are processed on their behalf and under their instructions, as described in our data processing agreement. If your question is about a conversation you had with one of those organizations, contact that organization first; we will help it answer you.
Information we handle
Account information: your name, email address, sign-in records, workspace memberships and roles. Sign-in runs through Microsoft Entra, which verifies your email address.
Workspace content: conversations, contacts, attachments, data tables, stored files, workflow definitions, run inputs and results, agent instructions, and data exchanged with services your workspace connects. What is involved depends on the features and connections your organization uses.
Billing information: the workspace, plan, billing period, invoices and payment status. Card and bank details are entered on Stripe's payment pages and are held by Stripe, not by NodeHub.
Contact requests: what you send us through the website or by email, including your message and the product or plan you asked about. A contact request does not subscribe you to marketing email.
Technical information: IP address, browser and device details, request times and error records, produced when your browser reaches our servers through Cloudflare and Microsoft Azure. We use it to run, secure and fix the service.
Why we use it, and our legal bases
To provide the service you signed up for: authenticate you, show the right workspace, run your configured automations, store your content and process payments (performance of a contract).
To keep the service secure and working: detect abuse, enforce rate limits, investigate failures and keep audit records of who changed what (our legitimate interest in a safe, reliable service).
To answer requests and support you, and to send service messages about your account, security or billing (performance of a contract and legitimate interest).
To keep financial and tax records and respond to lawful requests (legal obligation).
We do not sell personal information, share it for cross-context behavioral advertising, or use workspace content to train AI models. The website uses no advertising or analytics trackers.
Connected services and AI
When your workspace connects another service, such as a CRM, mailbox or AI model, NodeHub sends and receives the data your workflows and settings direct. Those services are chosen by your organization and process the data under your organization's own agreement with them.
AI features run on model providers your workspace connects with its own key. A request can include instructions, the customer context you supply, selected knowledge and tool results. Review a provider's terms before sending it sensitive information.
Cookies and browser storage
We use only the cookies needed to sign you in, keep your session secure, remember your selected workspace and protect forms against forged requests. Some interface preferences are kept in your browser's local storage.
Microsoft Entra (sign-in) and Stripe (checkout) set their own cookies on their pages under their own notices. We set no advertising or analytics cookies, so there is nothing to opt out of.
How long we keep it
Account and workspace content is kept while your workspace is active. Workflow run details (step results, inputs and outputs, agent turns) are removed 30 days after a run finishes; a short run summary stays so runs are not repeated and decisions remain traceable.
When a subscription ends, the workspace moves to the Free plan and its content stays in your account. To have a workspace and its content deleted, an owner can ask us at [email protected]. Deleted data leaves our backups as they expire: database restore points within 35 days and weekly backups within three months.
Billing and tax records are kept as long as tax law requires, generally seven years. Contact requests and support emails are kept for as long as needed to answer them and for up to two years after.
Where it is stored, and transfers
NodeHub stores data in Microsoft Azure in the United States (Central US region). Cloudflare handles traffic to our sites through its worldwide network, so requests can pass through data centers near you.
If you are in the European Economic Area, the United Kingdom or Switzerland, your information is transferred to the United States. We rely on the European Commission's Standard Contractual Clauses (and the UK addendum) and on our providers' own transfer safeguards.
How we protect it
Traffic is encrypted in transit, and data is encrypted at rest by Azure. The database has no public internet address. Each workspace is separated by row-level security in the database. Connection credentials are sealed with a separate encryption key, and production keys are held in Azure Key Vault. Access to production is limited and logged.
No system is perfectly secure. If a breach affects your personal information, we will tell you and the relevant authorities as the law requires.
Your rights and how to use them
Depending on where you live, you can ask to access, correct, delete or export your personal information, object to or restrict how we use it, or withdraw consent you gave. California residents have the right to know, delete and correct, and not to be discriminated against for using these rights. Email [email protected]. We answer within 30 days and may need to confirm your identity first.
For content in an organization's workspace, we pass your request to that organization, which decides how it is handled. If you are in the EEA or UK, you may also complain to your local data protection authority.
NodeHub is for businesses and is not directed to children under 16. Material changes to this notice will be posted here with a new effective date and announced in the product before they take effect.