Privacy Policy

1. Information We Collect

We collect information you provide directly, as well as data generated through your use of our services.

1.1 Information You Provide

• Account information: name, email address, and password when you create an account.
• Profile information: profile picture, job title, and workspace details you choose to add.
• Content: tasks, projects, comments, proposals, and other content you create within WorkWiz.
• Payment information: billing address and payment method details processed securely through Stripe. We do not store your full credit card number.
• Communications: messages you send to us through support, contact forms, or email.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, actions taken, and time spent within the application.
• Device information: browser type, operating system, device type, and screen resolution.
• Log data: IP address, access times, referring URLs, and error logs.
• Cookies and similar technologies: as described in our Cookie Policy.

1.3 Information from Third Parties

When you connect third-party integrations (Google Calendar, Microsoft Outlook, Slack, Notion), we receive limited data necessary to provide the integration. We only access the scopes you explicitly authorize.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve WorkWiz's features and services.
• Process transactions and send related information (invoices, receipts).
• Send service-related notifications (password resets, security alerts, feature updates).
• Power AI features — your task and project data may be processed by our AI providers (OpenAI, Anthropic, Google, or Zhipu) to generate suggestions, summaries, and recommendations. AI providers are contractually prohibited from using your data to train their models.
• Respond to your support requests and communications.
• Detect, prevent, and address technical issues, fraud, and security threats.
• Analyze usage patterns to improve product experience (aggregated and anonymized where possible).

3. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

• Service providers: trusted third parties who help us operate (hosting, payment processing, email delivery, analytics). These providers are contractually bound to protect your data.
• AI providers: task content processed for AI features is sent to our AI partners under strict data processing agreements.
• Team members: within your workspace, content is shared with members as configured by workspace administrators.
• Client portals: when you share a project or proposal via a portal link, the recipient can view the shared content.
• Legal requirements: when required by law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice provided to you.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. When you delete your account, we remove your personal data within 30 days, except where retention is required for legal, accounting, or legitimate business purposes (up to 90 days for backups).

Content in the Trash is automatically purged after 30 days. Deleted workspace data is removed within 30 days of workspace deletion.

5. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS 1.2+) and at rest (AES-256-GCM).
• Passwords are hashed using bcrypt with a cost factor of 12.
• Sessions use secure, HTTP-only, SameSite cookies with JWT tokens.
• Rate limiting and brute-force protection on authentication endpoints.
• Regular security audits and vulnerability assessments.

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to security@workwiz.space.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to processing of your personal data for certain purposes.
• Restriction: request restriction of processing under certain conditions.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at privacy@workwiz.space or use the data export feature in your account settings. We will respond within 30 days.

7. International Data Transfers

WorkWiz is headquartered in the United States. Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers from the EEA, UK, or Switzerland.

8. Children's Privacy

WorkWiz is not intended for children under 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at privacy@workwiz.space.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice in the application. Your continued use of WorkWiz after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: