Privacy Policy
Last updated: September 5, 2026
This policy explains, in plain language, exactly what information Automationor collects, why, who it is shared with, how long it is kept, and the choices you have.
1. Who we are & scope
Automationor (automationor.com) is a marketplace for automations, HTML apps and freelance works, operated by Lumina Energy Consultancy LLC, Florida, USA ("we", "us"). This policy covers the website, the publisher panel and our messaging, and applies together with our Terms of Service and Cookie Policy. It does not cover what a publisher does with data outside our platform — see Section 4.
2. Information you provide
Account & profile
When you register we collect your name, email address and password (stored only as a secure hash), plus optional profile details: avatar, bio, timezone and language. Publishers get a public profile page showing their name, avatar, bio and listings; buyers' profiles are not public.
Social sign-in
If you sign in with Google or GitHub, the provider sends us your name, email address, avatar and a provider account identifier, which we store to link your account; the sign-in tokens we receive are stored encrypted. At social sign-up we also infer your approximate location (country and timezone) from your IP address to preset your account settings.
Content you publish
Listings, descriptions, media, uploaded app bundles and the captured reference example of an automation.
Messages, support & contact
Conversations with publishers through our messaging system are stored so both sides keep their history. Support tickets (including attachments) and contact-form submissions are stored too; if you use the contact form as a guest we collect your email address, a phone number and your message.
Newsletter
Your email address and subscription status, with a one-click unsubscribe token.
3. Information collected automatically
- Usage activity — which listings you view, run, play and buy. For HTML apps we record play time in short heartbeats; guests are counted under a temporary session key, not a name.
- Search queries — stored in normalized, aggregate form to power the search suggestions everyone sees; they are not tied to a profile of you.
- Technical data — IP address, browser/device information and server logs (used for security, rate limiting and debugging).
- Affiliate-link visits — counted in daily aggregate by referring website and page (address only — never its query string), campaign tag, landing-page type and country (the country is derived from your IP address at the moment of the visit; the address itself is not kept). If you then sign up, those same source details are recorded with your account's affiliate attribution.
- Cookies — the small set described in the Cookie Policy: session, security tokens, optional "remember me" and the affiliate-attribution cookie.
4. Run & order data
When you run an automation, the form inputs you submit are delivered to that listing's publisher — to their webhook on a platform such as n8n, Zapier or Make.com, or to their own server — because that is where the work happens. The results are delivered back through our platform and stored so you can review them on My Runs; result files may be mirrored to our storage so they remain available. Freelance work orders flow the same way through order and delivery forms.
Publishers are contractually required to use the data they receive only to fulfil your run or order, to protect it, and to delete it when no longer needed. Think before you submit: only include the personal data a run actually requires.
5. Payments
Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store only references (customer and transaction identifiers), amounts, and your wallet ledger (top-ups, spending, refunds). Publishers who withdraw earnings complete identity (KYC) onboarding directly with Stripe — we store only the resulting account status.
6. How we use information
- Operating the marketplace: accounts, listings, executing runs, hosting apps, fulfilling orders, payments and payouts.
- Personalizing the catalog and recommendations (Section 7).
- Communicating with you: transactional email (verification, run results, order and payout updates), support replies, and the newsletter if you opted in.
- Trust and safety: moderation, malware scanning of uploads, fraud prevention, rate limiting, reliability scoring and enforcing our Terms.
- Complying with law and defending legal claims.
7. Personalization & automated processing
To rank the catalog for you, we build an interest profile from your activity signals (views, runs, purchases, skips), which fade over time. The profile is a numeric vector — not a readable dossier — and it is computed and stored entirely on our own infrastructure: no third-party AI service receives your data or our listings' text. Personalization affects only the order in which listings are shown; we make no automated decisions about you with legal or similarly significant effects.
10. How long we keep information
- Account & profile — for as long as your account exists; see Section 12 for deletion.
- Sessions — expire after 120 minutes of inactivity (or when you log out).
- Unverified email-change requests — deleted automatically after 1 hour.
- Run inputs, outputs and orders — kept so you can review your results, until the related listing or your account is deleted.
- Transactions, wallet ledger and payout records — retained as required by accounting, tax and dispute-resolution obligations, even after account deletion.
- Messages, support tickets and contact submissions — kept while relevant to providing support and keeping both sides' history.
- Operational logs & monitoring — application logs about 14 days; internal performance metrics about 7 days; debug traces about 48 hours.
11. Security
- All traffic is encrypted in transit (HTTPS); session cookies are secure and inaccessible to page scripts.
- Passwords are stored only as bcrypt hashes; social sign-in tokens and webhook secrets are encrypted at rest.
- Uploaded apps run in a sandboxed, origin-isolated player and uploads are malware-scanned.
- Registration, contact and webhook endpoints are rate-limited, with bot traps on public forms.
- Access is need-based and policy-enforced: a publisher can see only the run inputs for their own listings, and administrator/moderator access is limited to support and moderation.
No system is perfectly secure — use a strong, unique password, and if we learn of a breach affecting your personal information we will notify you without undue delay as applicable law requires.
12. Your rights & choices
- Edit your profile and account details in your account settings at any time.
- Export your wallet activity and publisher earnings as CSV from the Wallet page.
- Unsubscribe from the newsletter with one click in any issue.
- Request access to, correction of, or deletion of your personal information by contacting us (Section 17). We verify each request and respond as applicable law requires. Deletion removes your account and personal data, except records we must keep (Section 10) — completed transactions, and reviews which are already displayed without your name.
13. California & US state privacy rights
If you live in California or another US state with a comprehensive privacy law, you have the rights to know, access, correct, delete and obtain a portable copy of your personal information, and to be free from discrimination for exercising them. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of; we also do not use or disclose sensitive personal information for purposes requiring a right to limit. Exercise any right via Section 17 — you may use an authorized agent where the law allows, and we will not discriminate against you for doing so.
14. Children
The service is not directed to children and requires users to be at least 18. We do not knowingly collect personal information from children under 13; if we learn we have, we delete it. Parents who believe a child has provided us information can contact us per Section 17.
15. International users
We operate from the United States and process information there. If you use the service from elsewhere, you understand your information is transferred to and processed in the US, where privacy laws may differ from your country's.
16. Changes to this policy
We post changes here and update the date above; if a change is material we give notice on the site or by email before it takes effect.
17. Contact
Automationor is operated by Lumina Energy Consultancy LLC, Florida, USA.
Privacy questions and requests:
[email protected]
or the contact form.