Data Handling

• Your business data is processed on a dedicated private server — never on shared infrastructure
• Workflow execution logs are automatically deleted every 72 hours
• No client data is retained beyond what is needed to run your workflows
• Your data is never sold or shared with third parties

Credential Security

• API keys and third-party tokens are stored in an isolated credential vault with no public internet access
• Credentials are never stored in plain text — only encrypted references are kept
• Your credentials are removed from the processing pipeline immediately after authentication
• Access is strictly limited to authorised workflows only

Infrastructure

• Dedicated private server — not shared hosting
• All traffic routed through Cloudflare’s enterprise security layer
• No publicly exposed server ports
• All backups are AES-256 encrypted
• Automated daily backups with 7-day retention

Privacy

• GDPR-aware data handling practices
• Data minimisation — only what’s needed is collected
• Full privacy policy: privacy.pleko.win
• Questions or concerns: krtk@pleko.win