Privacy Policy

This policy covers the Closure marketing website and the hosted Closure platform (together, the “Service”). It does not cover third-party services you connect to your product graph; those are governed by their own privacy policies.

Account data. Name, email, and authentication identifiers when you request access or sign in, plus Organization membership and role.

Usage data. Product telemetry needed to run and secure the Service — workflow run and Events metadata, audit trails, log and device information, and approximate location derived from IP address.

Communications. Messages you send us for support, sales, or access requests.

Billing data. For paid plans, billing contact and transaction records. Card details are handled by our payment processor and do not touch our servers.

Content in your Organization’s product graph — Experiences, Workflows, Knowledge, form submissions, and connected-system data — is Customer Content under our Terms of Service. Where Customer Content includes personal data, the customer is the controller and Closure processes it only on the customer’s documented instructions. Secrets collected for connectors are stored in the vault and used only to execute the integrations you configure. A data processing addendum is available on request.

To provide, secure, and support the Service; to communicate with you about your account, access request, or support issue; to comply with law; and to improve the Service using aggregated, de-identified metrics. We do not sell personal data and we do not use it for third-party advertising.

We do not use Customer Content to train machine-learning models without your explicit consent. AI features process your content at runtime to provide the Service — for example, to execute an agent step you configured — under the same access controls as the rest of your Organization.

We share personal data only with service providers that help us run the Service — hosting and infrastructure, email delivery, authentication, and payment processing — under contracts that limit their use of the data to providing their service to us. We may also disclose data where required by law, or as part of a corporate transaction with notice to you. A current subprocessor list is available from privacy@closurenetwork.com.

The Service uses essential cookies for sign-in and security, and a preference cookie for language selection. We do not use third-party advertising or cross-site tracking cookies.

We keep account data while your account is active and for a reasonable period afterwards for legal and security purposes. Customer Content is retained per the Terms: exportable for thirty days after a paid plan ends, then deleted from active systems, with backups aging out on a scheduled cycle.

We protect data with Organization isolation, role-based access control, encryption in transit, vaulted secrets, and audit trails. Our approach is described on the trust page. No system is perfectly secure; we will notify affected customers of a personal-data breach as required by law.

We are a U.S. company and process data in the United States. Where we transfer personal data from other jurisdictions, we rely on appropriate safeguards such as standard contractual clauses.

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Contact privacy@closurenetwork.com to exercise them; we will respond as required by applicable law. If your data is in a customer’s product graph, we may refer your request to that customer as the controller.

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

We may update this policy from time to time. Material changes will be announced through the Service or by email before they take effect. The English-language version controls over any translation.

Privacy questions and requests: privacy@closurenetwork.com.