Privacy Policy

Last updated: 23 July 2026

1. Who we are

This service is operated by Mortar Automation, a Dutch sole proprietorship (eenmanszaak) owned by Dan Bennett, registered with the Netherlands Chamber of Commerce (KvK) under number 42119993. Mortar Automation ("Mortar", "we", "us") is the data controller for the personal data described here. Contact: hello@mortarautomation.com.

This policy covers our website mortarautomation.com and the Mortar application at app.mortarautomation.com.

2. What we collect, and why

Waitlist: your email address and any automations you select. Basis: your consent. Purpose: to contact you about early access.
Account data: name, email, and authentication details when you create an account. Basis: performance of our contract with you.
Connected services: when you connect a tool to run an automation, we store the access tokens for that connection and access only the specific data the automation needs. Basis: contract and your consent.
Operational data: application logs and error diagnostics. Basis: our legitimate interest in security and reliability.

3. Google user data (Limited Use)

Mortar Automation's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

We request only the scopes needed to run the automations you enable — currently Google Sheets, and only the specific files you choose to share (the drive.file scope). We do not request access to your full Google Drive.
Google user data is used only to provide the features you request. Where an automation uses AI, your Google data is processed for inference only, within the EU, and is never used to train or improve any AI/ML models — ours or anyone else's.
We do not sell Google user data, and we do not transfer it to third parties except as needed to provide the service, to comply with applicable law, or as part of a merger or business transfer.
We do not use Google user data for advertising.
We do not allow humans to read your Google user data unless: you give explicit consent; it is necessary for security purposes (such as investigating abuse); it is required to comply with applicable law; or the data has been aggregated and anonymized.

4. Where your data lives (EU)

We host in the European Union and use EU-based providers. Personal data processed by AI is handled by an EU-hosted model provider for inference only. A current list of our sub-processors is available on request at hello@mortarautomation.com.

5. How long we keep it

Waitlist: until you're onboarded or ask us to remove you.
Account & connected-service data: kept for the life of your account and deleted when you close your account or on request.

6. Your rights

You have the right to access, correct, delete, restrict, port, and object to the processing of your personal data. To exercise any of these, email hello@mortarautomation.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Changes

We'll post any updates on this page and notify active customers of material changes.