n8n
- The policy says your content is not used for AI training.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
They say they do not train AI on your data, but they take a broad license, cookies, , and keep content for months after you leave.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, workflows, usage metrics, device and IP data, and payment details.
Read the exact line
Privacy policy
“Traffic and Device Data (i.e. technical information generated when you access or use the Website or Services, such as IP address, device and browser type, operating system, language settings, access times,”
Training
They run the product, payments, support, and marketing; they say they do not train AI on your data.
Read the exact line
Privacy policy
“We do not use personal data processed in connection with the Website or Services, including data from third-party services or integrations, to train n8n or third party machine learning (ML) models.”
Sharing
Hosting, payments, analytics, ads tools, and other vendors may see data, including some in the US.
Read the exact line
Privacy policy
“We may share personal data with carefully selected service providers that support our business operations.”
Kept
They keep data as long as needed; cloud content is usually deleted 6 months after your account ends.
Read the exact line
Terms of service
“Your Customer Content is usually deleted 6 months after the deactivation of your account with us, unless we are required to keep it for longer to comply with our legal, accounting or regulatory requirements.”
Controls
You can delete a cloud account in the product, object to telemetry, and change cookie settings.
Read the exact line
Privacy policy
“You can delete your n8n cloud account via the product.”
Fine print
As-is service, you them, annual fees are non-refundable, and English courts apply.
Read the exact line
Terms of service
“If you sign up to an annual plan, this is a non-refundable payment which will be payable in advance.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Delete your n8n cloud account in the product
In the product (privacy policy: “You can delete your n8n cloud account via the product.”)
Turn off self-hosted telemetry
https://docs.n8n.io/hosting/securing/telemetry-opt-out/
Change cookie and ad tracking settings
Cookie Settings button at the bottom left of the website
Cancel a monthly plan in the Cloud Services or by email
Via the Cloud Services or [email protected]
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If they get sued because of how you used the product, you may have to pay their legal costs.
Read the exact line
Terms of service
“You agree to us, our affiliates, directors, officers and employees against all loss, costs, damages liabilities and expenses that arise out of your breach of these Terms and/ or use of the Cloud Services.”
For example, if a workflow you run causes a dispute, they can ask you to cover their lawyer bills.
Yearly plans are paid up front and they say you cannot get that money back.
Read the exact line
Terms of service
“If you sign up to an annual plan, this is a non-refundable payment which will be payable in advance.”
For example, if you cancel after two months of an annual plan, they keep the full year fee.
They can change the privacy rules right away without warning you first.
Read the exact line
Privacy policy
“We may update this Privacy Policy from time to time without prior notice and immediate effect to reflect legal changes or enhancements to our Website or Services.”
For example, a new sharing practice could apply the next time you open the site.
They can cut off your account at once if they think you broke the rules.
Read the exact line
Terms of service
“When we consider that a breach of these Terms has occurred, we may take such action as we deem appropriate including:immediate, temporary or permanent withdrawal of your right to use the Cloud Services;”
For example, they could lock you out the same day without a warning email.
They do not promise the product will work well or fit your needs.
Read the exact line
Terms of service
“The Cloud Services are provided “as is”. We make no guarantee as to the quality of the Cloud Services and their suitability for your individual purposes”
For example, if a workflow fails and costs you money, they say they are not .
The website can use cookies for personalized ads if you allow them.
Read the exact line
Privacy policy
“advertising and analytics Cookies that enable personalized ads and analytics.”
For example, after you accept ads cookies, an ad network may track visits to show n8n ads elsewhere.
You still own your workflows, but they can copy and use them as needed to run the service, including through vendors.
Read the exact line
Terms of service
“You grant n8n a non-exclusive, , fully paid, worldwide licence (with the right to to n8n's subcontractors and third-party service providers performing services for n8n) to access, use, reproduce and create derivative works of Customer Content solely to provide and support the Cloud Services.”
For example, a hosting partner can store and process your workflow files to keep the cloud running.
After you leave, they typically keep your content for half a year, or longer if the law says so.
Read the exact line
Terms of service
“Your Customer Content is usually deleted 6 months after the deactivation of your account with us, unless we are required to keep it for longer to comply with our legal, accounting or regulatory requirements.”
For example, a deleted cloud workspace may still sit on their systems for six months.
They say your personal data is not used to train their AI or someone else’s AI.
Read the exact line
Privacy policy
“We do not use personal data processed in connection with the Website or Services, including data from third-party services or integrations, to train n8n or third party machine learning (ML) models.”
For example, a prompt or workflow you run should not be fed into a model-training set.
The cloud terms also say they will not train models on what you upload or what the AI produces.
Read the exact line
Terms of service
“n8n will not use Customer Content or Output to train machine learning models, as further set out in the AI Terms.”
For example, AI-generated workflow text should not be used to teach their models.
They say the product is not for kids under 16, but they rely on not knowing rather than a strong age check.
Read the exact line
Privacy policy
“Our Website and Services are not intended for children under 16 years of age. We do not knowingly process personal data from children under 16.”
For example, a 15-year-old could still sign up if they enter an adult-looking email.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- inputs and outputs
- Inputs are what you type, say or upload to an AI; outputs are what it gives back to you. For example, the question you ask a chatbot is an input and its answer is an output, and both may be stored.
How we got here · grade B · score 50/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect account, contact, workflow and usage data plus device identifiers, IP addresses, logs, and payment details.
Does it record your voice, face or body, and what happens to that?
The product documents do not describe collecting voice, face, or body data as a biometric. Event photos are mentioned separately.
Are your chats and uploads used to train AI models, and is that off by default?
They say they do not use personal data, customer content, or AI output to train n8n or third-party machine learning models.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
The website uses third-party marketing, analytics, and advertising cookies and tools, with consent via the cookie banner.
Do they sell or share your data, and can you opt out?
They share data with service providers such as hosting, payments, analytics, and marketing tools, and say they do not disclose it for other purposes.
What rights do they take over what you type and what the AI makes?
You keep ownership of customer content. They take a worldwide license, including sublicense to vendors, only to provide and support the cloud service. Public community posts get a broader license.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete a cloud account in the product, but they usually keep customer content for six months after deactivation, and longer if the law requires.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use physical, technical, and administrative security measures and point to a security page. No independent audit is described in these documents.
Is there a real age gate, and are teens protected?
The service is not intended for children under 16 and they say they do not knowingly process that data, with no age-assurance method described.
Will they tell you when the rules change, and is the policy specific?
The privacy policy can change without prior notice and with immediate effect. Terms are updated by posting a new dated version.
Can they close your account without warning, and can you get your data out first?
They may immediately withdraw access for a suspected breach and may suspend or terminate for law, security, or acceptable-use reasons. They email 30 days before deactivating for deletion.
If something goes wrong, who pays?
The cloud is as-is with broad exclusions of liability, and you must indemnify them for losses from your use or breach.
Do subscriptions renew on their own, and can you get a refund?
Monthly plans can be cancelled anytime and last until month end. Annual plans are prepaid and non-refundable.
The privacy policy is 4,325 words at a professional or legal expert level (Flesch reading ease 27.8); the terms are 3,095 words at a college graduate level.
