What we keep, where, and who can see it
Plain answers to what a careful buyer asks. If something here stops being true, this page changes first.
Where your data lives
In your own country
Each company is placed in a database in its own country when it signs up — an Indian company’s workflows, runs and lists stay in India.
Separate from other companies
Every record carries the company it belongs to, and every query is limited to it. One company can never read another’s data.
Keys, passwords and sign-ins
Stored encrypted, never shown again
A key or password is readable only by the server that uses it — not in the product, not by our staff, not by you once it is saved.
Signing in to your apps
Microsoft, Google and the rest are connected by signing in with them. We never see those passwords, and you can revoke access at any time.
Signing in to Bizomate
Passkeys and two-factor
Sign in with a passkey, or a password with a second step. A company can require two-factor for everyone in it.
One place to sign in
Every sign-in happens on bizomate.io, and only there. This site never asks for your password.
The record of every run
What ran, and what it did
Every run keeps what started it and what each step did — 7 days on Free, 30 on Starter, 90 on Pro.
Nothing runs by accident
Imported and copied workflows arrive as drafts. Nothing inside an imported file is ever executed.
Your data is yours
Export on every plan
Take a copy of your workflows whenever you like — even after a plan ends. Holding someone’s data hostage is not how we keep customers.
Leaving
Close your company and its data is removed after 30 days, in case you change your mind.
Certifications
We do not hold any certifications yet. When we do, they will be listed here with their reports — not before.
Questions for our security team? Write to us