سياسة الخصوصية

The data controller is , a company incorporated in the Hong Kong Special Administrative Region under the Companies Ordinance (Cap. 622), , registered office .

For anything concerning privacy or data protection — including exercising your rights — write to . That address reaches the person responsible for data protection at our company.

This policy covers www.workdeck.ai, the desktop application, the Office add-ins and related services.

This policy exists in English and Chinese. In the event of any discrepancy, the English version prevails.

We collect on a "no more than needed" basis. The table sets out each category of personal data, what we use it for, and the legal basis we rely on under the GDPR and equivalent laws.

Where we rely on legitimate interests, we have weighed that interest against your rights and concluded it does not override them; the processing is limited to security and fault diagnosis, and you may object at any time under clause 10.

Providing the data marked as necessary for the contract is a condition of having an account: without it we cannot create or run one. Everything based on consent is genuinely optional.

The document and AI-conversation statements below concern local desktop use. The Office/WPS add-in processes documents and conversations through our hosted backend, as explained in clauses 6 and 8. Otherwise, we do not actively collect the following:

• Your documents, case files or project files and their contents — the desktop application is local-first and these stay on your device;
• Your desktop AI conversations — the desktop application talks to the model provider directly; hosted processing and retention for the Office/WPS add-in are covered separately in clauses 6 and 8;
• Special category data under Art. 9 GDPR: we neither ask for nor want data revealing health, ethnicity, political opinions, religion, trade union membership, sex life or biometric identifiers;
• Government identifiers, payment card numbers (Stripe handles those and we never see them), location, contacts, call logs, messages or photo libraries;
• Your browsing outside this service — we run no third-party analytics or advertising SDK, and we do not buy data about you from anyone.

We do not use any of your content to train models, we do not sell personal data, and we do not carry out profiling or automated decision-making that produces legal or similarly significant effects for you.

The site sets one cookie:

Web fonts are bundled into the site at build time, so loading a page makes no request to any third-party host. You can delete the cookie in your browser; the effect is the same as signing out.

• Running the service: identifying accounts, checking entitlements, settling charges, delivering what you bought;
• Security: spotting anomalous sign-ins and abuse, rate limiting, mitigating attacks, diagnosing faults;
• Improving the product: aggregate statistics from anonymous telemetry showing which features get used and where people drop off;
• Handling your feedback: reading what you send, reproducing the problem, fixing it and replying to you;
• Legal obligations: keeping the tax and accounting records the law requires;
• Communicating with you: service changes, security incidents, changes to the terms.

نحن لا نستخدم البيانات لأي غرض آخر. وإذا احتجنا إلى ذلك في أي وقت، فسنطلب موافقتك بشكل منفصل. نحن لا نستخدم البيانات الشخصية للإعلانات المستهدفة أو التسعير التفاضلي، ولا نرسل رسائل بريد إلكتروني تسويقية إلا بطلب منك.

لا نقدم بياناتك الشخصية إلى أطراف ثالثة إلا في الحالات التالية. ويعمل كل من هذه الجهات بصفته معالجًا لنا أو متحكمًا مستقلًا لأغراضه الخاصة، وفقًا لشروطه المنشورة الخاصة.

We may also disclose data where the law requires: complying with a binding order from a court or authority with jurisdiction over us, where necessary to protect the vital interests of any person, or where you have made the information public yourself. Where we are legally permitted to tell you about such a request, we will. In a merger, division or transfer of assets we would transfer personal data along with the business, telling you the recipient's name and contact details beforehand; the recipient must continue to honour this policy.

This service is operated from Hong Kong on infrastructure in Singapore, and it depends on providers elsewhere. If you are in the EEA, the UK, or any country with transfer rules of its own, your personal data is transferred outside that country in the following cases:

حيث يستند نقل البيانات إلى موافقتك، يمكنك سحبها في أي وقت — بإيقاف إرسال الملاحظات أو تغيير قناة الذكاء الاصطناعي — وسنوقف النقل المقابل. لا يؤثر السحب على مشروعية ما حدث قبله. يمكنك أن تطلب منا عبر البريد الإلكتروني نسخة من ضمانات النقل ذات الصلة.

بعد انقضاء هذه المدد نحذف البيانات أو نجهّل هويتها. وحيثما يقتضي القانون مدة أطول، فإن القانون هو الحاكم.

• In transit: HTTPS is enforced site-wide;
• Passwords: stored as salted scrypt hashes — we cannot recover your original password;
• Account keys: only the hash and prefix are stored; the plaintext is shown to you once at generation and then exists nowhere in our systems;
• Payment card data: never touches our servers — it goes from your browser to Stripe;
• Model keys: stored encrypted;
• Access control: production access is limited to those who need it;
• Durability: financial data is written transactionally and backed up regularly.

No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where the risk is high, tell you directly.

If the GDPR, the UK GDPR or a comparable law applies to you, you have the following rights over the personal data we hold about you. We honour them for everyone, wherever you are.

• Access — find out whether we process data about you, what and why, and obtain a copy (Art. 15);
• Rectification — have inaccurate or incomplete data corrected; you can also edit your account details yourself (Art. 16);
• Erasure — have your data deleted where the purpose is fulfilled, you withdraw consent, you successfully object, or we have processed unlawfully. You can trigger this yourself by closing your account; the limits are in clause 8 (Art. 17);
• Portability — receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible (Art. 20);
• Restriction — have processing paused while a dispute about accuracy or lawfulness is resolved (Art. 18);
• Objection — object to processing based on our legitimate interests, including the security logging described in clause 2 (Art. 21);
• Withdraw consent — for anything based on consent, such as telemetry and feedback, at any time and without giving a reason (Art. 7(3));
• Not be subject to automated decision-making — we do not carry out any that produces legal or similarly significant effects (Art. 22);
• Complain to a supervisory authority — see clause 13.

How to exercise them: edit your details, revoke account keys, switch telemetry off, and close your account yourself from your account page. For anything else, write to saying which account you mean and what you want. We may ask you to verify your identity, and we will not ask for more identifying data than necessary to do so.

The Service is aimed at professionals and is not offered to anyone under 18. We do not knowingly collect personal data from children. If we learn that we hold data about a child, we delete it promptly.

A parent or guardian who becomes aware of such a case can reach us at and we will act on it without delay.

We may revise this policy. For substantive changes — new purposes, new categories of data, new recipients or new transfer destinations — we will notify you by website announcement and by email at least 30 days before they take effect, and we will seek fresh consent where the law requires it.

The effective date at the top of this page always reflects the current version. Earlier versions are available on request by email.

For any question, request or complaint about this policy or our handling of your personal data, write to . We reply within one month.

Please raise it with us first — most things are quicker to fix directly. But you do not have to, and you never lose the right to go elsewhere:

• If you are in the EEA, you may lodge a complaint with the data protection authority of the country where you live, where you work, or where the alleged infringement took place;
• If you are in the UK, with the Information Commissioner's Office;
• If you are in Hong Kong, with the Office of the Privacy Commissioner for Personal Data;
• Elsewhere, with whichever authority supervises data protection where you live.

You may also pursue a judicial remedy, or use the dispute resolution route set out in the Terms of Service.