Privacy Policy

Requex.me ("Requex", "we", "us") is operated by an individual and is the data controller for personal data processed through the service at requex.me (the "Service"). For privacy questions or to exercise your rights, contact developer@requex.me.

2.1 Account data. When you sign in we receive, via Firebase Authentication, your email address, display name, profile photo URL, sign-in provider, and a Firebase user ID. We also store your acceptance of these policies (timestamp and version).

2.2 Webhook, mock, and scheduled-request data. When traffic hits your webhook URLs, mock servers, or scheduled (cron) jobs, we temporarily store the request method, headers, query parameters, body/payload, sender IP address, and timestamp, plus any responses and forwarding logs.

2.3 Workflow data. If you build automation workflows, we store the workflow definition and version history, the trigger payloads that start each run, and the inputs/outputs of each node for run history and debugging.

2.4 Integration credentials. If you connect a third-party service (e.g. Slack, Discord, Shopify, Google Sheets, Instagram, or outbound email), we store the access tokens or credentials needed to act on your behalf, secured and used only to run the features you configure.

2.5 Usage & analytics. Browser type, operating system, pages/features used, timestamps, and IP-based approximate location, collected via our own logs and Google Analytics.

⚠️ Do not send passwords, payment card data, or other sensitive personal information through webhook URLs, mock servers, or workflows unless you have a lawful basis and accept the risk, these payloads are stored to power inspection and replay.

Some workflow nodes (AI text, classify, extract, and agent) send the content you route through them to an external large-language-model provider to generate a result. That provider processes the content as our sub-processor. Do not route data through AI nodes that you are not permitted to share with a third-party AI service. AI output may be inaccurate, you are responsible for reviewing it.

• To provide the Service and the features you configure, legal basis: performance of a contract.
• To secure, maintain, debug, and improve the Service, and prevent abuse, legitimate interests.
• Analytics and product measurement, legitimate interests (or consent where required).
• To send service or account notifications, performance of a contract / legitimate interests.
• Where we ask for it (e.g. optional features), consent, which you may withdraw at any time.

We do not sell your personal data. We share data only with the service providers that operate Requex on our behalf (authentication, hosting, analytics, AI processing, and email) and with the third-party services you explicitly connect. See our Sub-processors page for the current list. We may also disclose data where required by law.

Webhook/mock/cron request data and workflow run history are retained transiently and pruned automatically (we keep roughly the most recent runs/requests per resource and delete older ones). Account data is retained while your account is active. When you delete your account we deactivate it and revoke connected credentials and API keys; see Section 9.

If you are in the EEA or UK, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your supervisory authority.

To exercise any of these, email developer@requex.me. You can delete your account at any time from Settings.

California residents have the right to know what personal information we collect, request deletion, and opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights. Submit requests to developer@requex.me.

You can delete your account from Settings. On deletion we deactivate the account, revoke your API keys, and clear stored third-party integration credentials. A minimal record may be retained where required for security, dispute resolution, or legal compliance.

The Service is hosted on cloud infrastructure and our sub-processors may process data outside your country, including outside the EEA/UK. Where required, such transfers rely on appropriate safeguards such as Standard Contractual Clauses.

We use industry-standard measures including TLS in transit, access controls, and secure storage of credentials. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

The Service is not directed to children. You must be at least 16 years old (or the age of digital consent in your country) to use it. We do not knowingly collect data from children.

We use cookies and similar technologies for functionality and analytics. See our Cookie Policy for details and opt-out options.

We may update this policy; material changes are reflected in the "Last updated" version at the top. Continued use after an update constitutes acceptance of the revised policy.