AirWorkflowsPrivacy Policy
AirWorkflows is operated by Shamil Magomedov. For privacy, support, or security questions, contact mshamrock@gmail.com.
This notice covers the AirWorkflows website, visual canvases, public read-only canvas links, and the AirWorkflows MCP connector. It describes the product as currently implemented.
Information we handle
- Account and access: your email address, optional display name, a salted password hash if you register with email and password, session and security records, and OAuth grants or token hashes when you connect an MCP client.
- Workspace content: canvases, object names and descriptions, relationships, layout choices, and other content you add. A recovery copy may also remain in your browser's local storage.
- Airtable connections: base identifiers and the read-only schema you import. If you choose to save a personal access token in your profile, we encrypt it before storing it and use it to refresh the imported schema. You can remove a saved connection in the app. AirWorkflows does not use the connector to write to Airtable.
- Public links: creating a read-only share stores a snapshot of the selected canvas. Anyone with its link can see that snapshot without signing in. Do not put confidential or personal information into a canvas you plan to share publicly.
- Technical data: service providers may process request, device, and security information needed to deliver and protect the service.
How and why we use it
We use account and workspace information to provide sign-in, save and display canvases, import the Airtable structure you request, create the public links you request, and operate a connector you authorize. We use security information to protect accounts and investigate abuse. Where applicable, the legal bases are providing the service you request, our legitimate interest in keeping it secure, and your consent for optional analytics.
Claude and other MCP clients
If you authorize a client such as Claude, it may read your AirWorkflows canvases and imported Airtable structure and may create or change canvases within the scopes you approve. Tool inputs and responses pass between that client and AirWorkflows. The client provider may process those exchanges under its own terms and privacy notice. Disconnect the client in your AirWorkflows profile and in the client to stop future access. Connecting a client does not give it permission to write to Airtable through AirWorkflows.
Optional Google Analytics
With your permission, we use Google Analytics 4 (measurement ID G-C52BKWMMTN) to understand visits and improve the website. Google Analytics may use a first-party client-ID cookie and receive page visits, approximate location, and browser or device information. We do not send canvas-share identifiers or URL query parameters as page locations. The analytics script is not loaded until you choose “Allow analytics.” You can refuse without losing access to AirWorkflows.
Your choice is stored in this browser. You can withdraw permission or reopen the choice at any time. Withdrawing does not erase data already collected by Google; contact us if you want to ask about that data.
Who receives information
We use hosting and infrastructure providers, including Vercel and the infrastructure hosting the AirWorkflows backend. Airtable receives requests only when you connect and import a base. Google receives analytics data only after your choice to allow analytics. A client provider such as Anthropic receives connector data only when you connect and use that client. These providers may process data in other countries under their own service terms and applicable safeguards. We do not sell your workspace content.
Storage and retention
Account, canvas, saved-connection, schema-cache, and public-share data are kept while needed to provide the service, unless you remove them or request deletion. A sign-in session is valid for up to 30 days; an MCP access token is valid for up to one hour and a refresh token for up to 30 days, unless revoked earlier. Expired security records may remain until maintenance removes them. Hosting logs and analytics data follow the relevant provider and account retention settings. Ask us at the address above if you need the current analytics retention setting or want data removed.
Your choices and rights
You can export your canvases, remove saved Airtable connections, revoke connector access, and choose whether to create public links. Email mshamrock@gmail.com to request access, correction, deletion, or a copy of your personal data, or to object to or restrict processing where applicable. You may also withdraw analytics consent using the controls above. Where data-protection law applies, you may complain to your local supervisory authority.
Changes
We may update this notice as the product changes. The date at the top identifies the current version. Material changes will be reflected on this page.