Graph Compose

Privacy Policy for Graph Compose

Last Updated: May 4 2025

Welcome to Graph Compose! This Privacy Policy explains how Graph Compose ("we," "us," and "our") collects, uses, discloses, and safeguards your information when you use our service ("Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

Relationship with Temporal Technologies Inc.: Our Service heavily utilizes the workflow orchestration platform provided by Temporal Technologies Inc. ("Temporal"). In providing our Service, Graph Compose acts as the data controller for the personal information you provide directly to us (like account information). However, when you use our Service to define and execute workflows, Temporal acts as a data processor on our behalf, processing data contained within those workflows according to our instructions and their terms. Temporal's processing of data on our behalf is governed by their own security and privacy practices, as outlined in their policies.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the Service after the date such revised Privacy Policy is posted.

Collection of Your Information

We may collect information about you in a variety of ways. The information we may collect via the Service includes:

Personal Data You Provide

Personally identifiable information, such as your name, email address, and company name, that you voluntarily give to us when you register with the Service, configure workflows, or when you choose to participate in various activities related to the Service (e.g., contacting support).

Workflow Data Processed by Temporal

Data you include within the workflows you define and execute using our Service. This data is processed by Temporal acting as our data processor to facilitate the orchestration and execution of these workflows. Graph Compose does not typically access the content of this workflow data except as necessary for support or troubleshooting, or as directed by you.

Derivative Data

Information our servers automatically collect when you access the Service, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Service. This may include interaction data with the Temporal infrastructure initiated via our Service.

Data from Third-Party Services

We may collect information from third-party services if you connect them to our Service. For example, if you authenticate using a third-party identity provider.

Data from Google Services (via OAuth)

If you choose to connect your Google Account to our Service, we will request your authorization to access specific data via Google's OAuth mechanism. We request access to the following Google scopes:

  • https://www.googleapis.com/auth/userinfo.email: To access your primary Google Account email address. We use this to identify your Google account and link it to your Graph Compose account.
  • https://www.googleapis.com/auth/drive.file: To view, edit, create, and delete specific Google Drive files that you use with our Service. This permission is primarily used to locate, access, or create Google Sheets spreadsheets for your workflows.
  • https://www.googleapis.com/auth/spreadsheets: To view, edit, create, and delete your Google Sheets spreadsheets. This permission allows our Service to read data from your spreadsheets and write results back to them as part of your defined workflows.
  • https://www.googleapis.com/auth/documents: To view, edit, create, and delete your Google Docs documents. This permission may be used for features that interact with Google Docs within your workflows.

We only access the specific data required to provide the features you enable by connecting your Google Account. Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We store necessary tokens securely to maintain the connection but do not store the content of your Google files accessed through these permissions unless explicitly required and stated for a specific feature.

Use of Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Service to:

  • Create and manage your account.
  • Provide, operate, and maintain the Service, including facilitating workflow execution via Temporal.
  • Process your instructions regarding workflow data sent to Temporal.
  • Authenticate and integrate with connected third-party services, such as Google, based on the permissions you grant.
  • Access and manipulate data within connected third-party services (like reading from or writing to Google Sheets) as necessary to execute your workflows.
  • Email you regarding your account or support requests.
  • Improve the efficiency and operation of the Service.
  • Monitor and analyze usage and trends to improve your experience with the Service.
  • Monitor for and prevent security incidents, fraud, spam, or other malicious activity, including monitoring interactions with Temporal infrastructure.
  • Notify you of updates to the Service.
  • Provide customer support and respond to your requests.
  • Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.
  • Process payments and refunds (if applicable).
  • Comply with legal obligations.

Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

With Service Providers

We share information with third-party vendors and service providers that perform services for us or on our behalf, which may include:

  • Temporal Technologies Inc.: As described above, Temporal processes workflow data on our behalf to provide the core workflow orchestration functionality of our Service.
  • Cloud hosting providers.
  • Payment processing providers (if applicable).
  • Data analysis providers.
  • Email delivery services.
  • Customer service and support tools.

We require these service providers to safeguard the personal information they process on our behalf.

By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation. This may include coordinating with Temporal if the legal request pertains to data processed within their infrastructure on our behalf.

Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Affiliates

We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners or other companies that we control or that are under common control with us.

With Your Consent

We may disclose your personal information for any other purpose with your consent.

Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information under our control. We also rely on the security measures implemented by our service providers, including Temporal Technologies Inc., for data they process on our behalf. Temporal's security practices can be found on their website (e.g., temporal.io/security).

While we and our providers have taken reasonable steps to secure the personal information, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse. You are responsible for safeguarding your account credentials.

Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to resolve disputes, and to enforce our agreements. Data processed by Temporal on our behalf is retained according to our instructions and their data processing agreements. Account information is typically retained for the duration of your account plus a reasonable period thereafter for legal or backup purposes.

International Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

Specifically, as we utilize Temporal Technologies Inc. services, your workflow data will be processed in the infrastructure locations used by Temporal, which may include the United States and other countries. We rely on appropriate transfer mechanisms, such as Standard Contractual Clauses or adequacy decisions, for such transfers as required by applicable law, both for our own data handling and through our agreements with service providers like Temporal.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Your Data Protection Rights

Depending on your location and applicable law (such as GDPR for Europe Residents or CCPA for California Residents), you may have certain rights regarding your personal information. These rights may include:

  • The right to access: You may have the right to request copies of your personal information that we hold.
  • The right to rectification: You may have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • The right to erasure: You may have the right to request that we erase your personal information, under certain conditions.
  • The right to restrict processing: You may have the right to request that we restrict the processing of your personal information, under certain conditions.
  • The right to object to processing: You may have the right to object to our processing of your personal information, under certain conditions, particularly for direct marketing.
  • The right to data portability: You may have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
  • The right to withdraw consent: If we are relying on consent to process your personal information, you have the right to withdraw your consent at any time.

Exercising Your Rights: To exercise any of these rights, please contact us using the contact information below. We will respond to your request in accordance with applicable law. We may need to verify your identity before processing your request.

Requests Regarding Data Processed by Temporal: If your request pertains specifically to data processed by Temporal on our behalf within a workflow, please direct your request to us first. As the data controller, we will coordinate with Temporal as necessary to address your request regarding the data they process for us.

Policy for Children

We do not knowingly solicit information from or market to children under the age of 13 (or a higher age threshold where applicable law requires). If you become aware of any data we have collected from children under the relevant age, please contact us using the contact information provided below, and we will take steps to delete such information.

Contact Us

If you have questions or comments about this Privacy Policy or our data practices, please contact us at:

support@graphcompose.io

Graph Compose 210 - 333 11 Ave SW Caglary, AB T2R 1L9