1. Who we are and what this covers
Werk is made by WerkHausHQ LLC, a Wyoming limited liability company at 30 N Gould St Ste R, Sheridan, WY 82801, United States ("we", "us"). This policy covers the website getwerk.ai, the Werk waitlist, and the Werk apps for iPhone, Android and the web, during the beta and after it.
We are the controller of the personal data this policy describes: we decide why and how it is used. Inside each project, the project's owner and admins decide who is in the project, and so who sees what it holds. If your team needs a data processing agreement with us, write to hello@getwerk.ai and ask for one.
2. What we collect and why
For each kind of data: what it is, why we use it, the legal basis for people in Europe, and how long we keep it. Section 7 explains how data is deleted.
You need to give us an email to join the waitlist or to have an account; without it we cannot provide them. Everything else you give us, such as the optional waitlist questions, is up to you.
Waitlist
When you join the waitlist we keep your email, the page's language, the date, and basic visit data: your country, the kind of device and browser, your browser's language, the site that sent you and the campaign in the link. If you answer the optional questions, we also keep what you tell us: your name, your team or business, what it does, its size, its phones and any message. We do not keep your IP address. We use this only to tell you about Werk. Basis: your consent. Kept: until you ask us to delete it. Otherwise we delete it once it is 24 months old, in a clean-up we run at least every three months.
Account and sign-in
Your account is your email address, confirmed with a one-time code when you sign in; there is no password. We also keep the name and photo you choose, your language, time zone and settings, and the sessions that keep you signed in. We use them to run your account and keep it secure. Basis: to provide the service you asked for. Kept: until you delete your account.
Beta access
While Werk is in beta, if you try to sign in without access, we keep your email, your device's language, which app you used (iPhone or web) and the date, so we can let you in later. If we let you in by your email address, or you use an access code, we keep a record of that. Basis: to provide the service you asked for. Kept: a request we never accept is deleted 365 days after it was made. A record of access by email is deleted 30 days after that access is removed, and your email is taken out of it when you delete your account. A request we accepted, and the record of an access code you used, are kept until you ask us to delete them.
Messages, voice notes, photos and documents
Your messages, your voice notes and their transcripts, your photos and their descriptions, and your documents and the text read from them. We use them to understand what you ask, record it on cards and reply. Basis: to provide the service. Kept: we have not yet set a fixed period, so they are kept until they are deleted as section 7 describes.
Cards, lists, steps, reminders and notices
Your projects' cards with their updates, photos and history, lists, steps and due dates; your reminders; and the notices and morning brief Werk sends you. We use them to run your projects. Basis: to provide the service. Kept: cards stay in their project while it exists. A past reminder is kept 30 days after it was due.
Usage
For each request to an AI model we record what it used (tokens, time and cost) and which model ran it, without the content. We use it to count your use against your plan, and to keep costs under control. Basis: to provide the service, and our legitimate interest in running it. Kept: for as long as we need them to account for use and costs. When you delete your account, they stay linked only to an internal number that no longer leads to your name or email.
Devices and notifications
If you allow notifications, the app registers your device with a token from Apple's push service. We use it only to deliver your notifications. Basis: to provide the service. Kept: until you sign out on that device or delete your account, or Apple tells us the token is no longer valid.
The audit record
We keep a full record of what Werk's AI models received and answered, and of the actions they took, so we can find out why Werk did something and fix it. Only people with the audit permission, a special permission held by the few people who investigate problems, can read it through Werk's tools, and each of those reads is logged. It never goes into our logs; the only copy of it is the one kept with a report you send us (below). Basis: our legitimate interest in keeping Werk secure and working. Kept: we have not yet set a fixed period, so it is kept until it is erased with the account or project it belongs to, or at your request.
Reports you send us
When you report a reply in the app, we keep the report, its reason, what you add to it, and a copy of the conversation around it with the AI requests behind it. We use it to fix what went wrong. Only people with permission can read it through Werk's tools, and each of those reads is logged. Basis: our legitimate interest in fixing Werk. Kept: the audio of a voice note you add to a report is deleted once it is transcribed. The report is kept until it is deleted with your account or with the project.
Visits to the website
We count visits to getwerk.ai with analytics we run ourselves, with no cookies and without storing your IP address. It records the page you visit, the site that sent you, your screen size and language, your approximate location (country, region and city) and the kind of device. We use it to see which pages people read. Basis: our legitimate interest in understanding how the site is used. Kept: as visit records that hold no name, email or IP address, for as long as we use them to understand how the site is read.
Data we receive about you from others
Someone in a project may name you in a message, or show you in a photo or a document they send. We keep that as part of the project's cards, for the same purposes and periods as above. The source is the person who sent it.
3. How AI works on your content
When you send a message, a voice note, a photo or a document, AI models read it to understand what you mean, record it on the right card and write the reply. Voice notes are transcribed by an AI model. AI also writes your morning brief and translates card updates for teammates who turn on translation.
Werk's replies are written by AI and can be wrong. Check anything that matters before you rely on it.
We do not use your content to train AI models. Under the terms of the AI providers listed in section 5, they do not use it to train their models either.
Werk takes no decision about you by automated means alone that has a legal or similarly significant effect on you. It never gives anyone a card that has no holder on its own, and it does not rank or suggest people.
4. Who can see what
Your conversation with Werk is yours. Your messages, your voice notes and their transcripts, and the photos and documents you have not added to a card are not shown to anyone in your projects. Inside Werk they are seen only by you and by the AI models that process them (section 3). When needed to find and fix a problem, they can also be read by the few people at Werk who hold the audit permission, by the people who handle a report you send us, and by the people who run Werk's database, as sections 2 and 11 describe.
What you add to a card is shared with the project: every card, update and photo on a card is seen by everyone in the project. Your name and your confirmed email are shown to the people in your projects.
Your reminders are yours, unless you share one; then the people who accept it see it too.
A project's owner and admins decide who is in the project. When someone leaves it, what they recorded stays in the project.
Werk's AI never decides who sees what: code checks every read against who may see it.
6. Where your data is processed
WerkHausHQ LLC is in the United States. If you use Werk from Europe or elsewhere, you send your data directly to us in the United States, where we process it. The providers in section 5 process it for us under their own terms.
7. How long we keep it and how deletion works
We keep data for the periods given in section 2. Where we have not set one, data is kept until it is deleted in one of these ways.
Deleting your account. You can delete your account in the app. Your access ends at once, and a background job erases your private data, such as your conversation and your reminders. What you added to a project's cards, apart from updates you undid, stays in the project as shared work, without your name. Projects where you are the only member are deleted with your account. If you own a project that still has other members, you first hand it to one of them or delete it.
Deleting a project. Only a project's owner can delete it, in the app. It disappears at once for everyone, and the owner can restore it for seven days; then it is erased for good, with its cards, files and reminders.
Leaving a project. When you leave a project or are removed from it, what you recorded stays in the project, and the cards you held go back to having no holder.
Asking us. You can ask us to erase specific data, such as a message, by writing to hello@getwerk.ai.
A copy may remain in our automatic database backups, which are kept for up to 14 days, and in a snapshot taken before an upgrade until that snapshot is deleted.
8. Your rights
Wherever you live, you can ask us to:
- show you the data we hold about you;
- correct it;
- delete it;
- give you a copy of it;
- stop using it, or limit how we use it, when you object;
- stop using it where your consent is the basis, such as for the waitlist: you can withdraw your consent at any time.
In the app you can delete your account, the projects you own and your reminders. For everything else, write to hello@getwerk.ai. We answer within one month; if a request is complex, we may take up to two more months and tell you why within the first month.
For data that belongs to a project, such as its cards, we may point you to the project's owner, who decides what the project holds.
If we refuse a request, you can ask us to review the decision. If you live in the European Economic Area, the United Kingdom or Switzerland, you can also complain to your data protection authority.
9. Age
Werk is for people 13 and older, or older where the law of your country sets a higher age to agree to this on your own. We do not knowingly collect data from children under 13, and if we learn that we have, we delete it.
10. What the site and the apps store on your device
The website sets no cookies. If you pick a light or dark theme, it stores that choice in your browser (werk-theme). Opening the site with ?analytics=off at the end of its address stores a setting that stops the visit analytics in that browser; ?analytics=on removes it.
The web app sets one cookie, which keeps you signed in, and keeps a copy of your conversation, your projects and their photos in your browser's storage, so it opens quickly and can keep what you send until the connection is back. It also keeps a few settings of its own, such as the labels of its notification buttons and whether its side panel is folded. Signing out removes the copy and ends the session the cookie keeps.
The iPhone app keeps your sign-in in the phone's Keychain, and the same kind of copy in its own storage on the phone, which is not included in the phone's backups. It also keeps a few settings of its own, such as your projects' colors and steps and the step templates you save, which the phone's backups can include. Signing out removes all of them from the phone.
We use no advertising or tracking cookies, so the site shows no cookie banner. No other company collects data about what you do across sites or over time through getwerk.ai or the Werk apps.
The website's analytics does not change what it does when your browser sends a Do Not Track signal. Either way it sets no cookies and does not store your IP address; to stop it, use ?analytics=off as above.
11. Security
Every read of your data in Werk goes through permissions: code checks who may see it, and Werk's AI never decides it. Our logs and error reports hold ids, codes and counts, never the text of your messages or transcripts. The people who run Werk reach data only with the permissions their work needs. Reads of the audit record and of reports through Werk's tools are logged, and only the people who run Werk's database can reach them otherwise. No system is perfectly secure, and we cannot promise that your data will never be exposed.
12. Changes to this policy
When we change this policy, we update the date at the top. If a change matters, we tell you by email or in the app at least 30 days before it takes effect, unless the law or the security of the service needs it to apply sooner.
13. Contact
For questions, requests or complaints about your data, write to hello@getwerk.ai. WerkHausHQ LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.