Privacy policy

This policy explains what afterrun collects to run Afterrun, and what you can ask us to do with it.

Last updated 31 October 2026

What we save

• Account: your email address and sign-in records, and your email alert choices and any delivery block caused by a bounce, spam complaint or provider suppression.
• Monitors and connections: monitor and client names, schedules, expected values, webhook addresses, sheet IDs and ranges, n8n addresses and workflow IDs. Webhook secrets and n8n API keys are stored encrypted.
• Results: check results and summaries, incidents, diagnoses and the content of alert emails, and compact delivery-event receipts.
• Lead audits and recoveries: n8n execution IDs, timestamps, statuses, settings used and a keyed digest for finding duplicates. The digest can't be read through the app.
• Reports: your studio name, time zone and share links.
• Billing: your Dodo customer ID, billing email, checkout links and subscription status. We don't receive or store card details.

What we read without saving

To compare leads, Afterrun reads the sheets you share with it and the saved n8n runs you give it access to, which can include your clients' lead details. It uses these for the comparison and doesn't save the lead values, contact details or request bodies. You're responsible for having your client's permission to connect them.

How we use it

We use this information to run checks, send the alerts you opted into, produce reports, manage your subscription, keep the service secure and answer you. We don't sell it, show ads or use analytics trackers.

Who processes it

• Supabase: sign-in, including sign-in emails, and database.
• Google: reading the sheets you share.
• Resend: alert emails.
• Dodo Payments: payment, tax and subscriptions, as merchant of record under its own privacy policy.
• Our hosting provider: running the app and its workers.

These providers may process data outside your country. We also disclose information when the law requires it.

Shared reports

Anyone with a report link can read that report without signing in. It shows the client name, your studio name, check counts and incidents. You can stop sharing at any time, and the old link stops working at once.

Cookies and browser storage

We use cookies to keep you signed in. The demo saves its sample data in your browser and sends none of it to us.

How long we keep it

Reports cover the current month and the previous 12 full months. Daily cleanup removes older completed checks and resolved incidents, with a small time-zone buffer. We keep the latest result, the latest verified result and the results needed to explain retained incidents. Open incidents and recovery-attempt records stay until the monitor is deleted, so we can confirm pending recoveries and prevent duplicate submissions.

Audit evidence expires 30 days after the audit starts, including an unfinished audit. Diagnoses expire after 90 days. Email bodies are removed after 30 days once the send attempt has ended; delivery history can be removed after 90 days once the incident and its emails are finished. Email-feedback receipts expire after 90 days, or sooner when their associated email history is removed. Billing-event receipts expire after 90 days and expired checkout links after 30 days. Active work is allowed to finish before cleanup.

Account settings, including email delivery blocks, connections, report settings and billing-account records stay while your account exists. Deleting a monitor removes its connections, check history, incidents, audits and recoveries. To delete your whole account, email us. Dodo Payments and our other providers may keep their own records as the law requires.

Your choices

You can ask us for a copy of your data, or ask us to correct or delete it, by writing to iamhassaans@gmail.com. You may also have further rights under the law where you live, including complaining to your data protection authority.