Privacy Policy

The data controller is , a company incorporated in the Hong Kong Special Administrative Region under the Companies Ordinance (Cap. 622), , registered office .

For anything concerning privacy or data protection — including exercising your rights — write to . That address reaches the person responsible for data protection at our company.

This policy covers www.workdeck.ai, the desktop application, the Office add-ins and related services.

This policy exists in English and Chinese. In the event of any discrepancy, the English version prevails.

Συλλέγουμε δεδομένα με βάση την αρχή «όχι περισσότερα από όσα χρειάζονται». Ο πίνακας παρουσιάζει κάθε κατηγορία προσωπικών δεδομένων, τον σκοπό χρήσης τους και τη νομική βάση στην οποία βασιζόμαστε δυνάμει του GDPR και ισοδύναμων νόμων.

Where we rely on legitimate interests, we have weighed that interest against your rights and concluded it does not override them; the processing is limited to security and fault diagnosis, and you may object at any time under clause 10.

Providing the data marked as necessary for the contract is a condition of having an account: without it we cannot create or run one. Everything based on consent is genuinely optional.

The document and AI-conversation statements below concern local desktop use. The Office/WPS add-in processes documents and conversations through our hosted backend, as explained in clauses 6 and 8. Otherwise, we do not actively collect the following:

• Your documents, case files or project files and their contents — the desktop application is local-first and these stay on your device;
• Your desktop AI conversations — the desktop application talks to the model provider directly; hosted processing and retention for the Office/WPS add-in are covered separately in clauses 6 and 8;
• Special category data under Art. 9 GDPR: we neither ask for nor want data revealing health, ethnicity, political opinions, religion, trade union membership, sex life or biometric identifiers;
• Government identifiers, payment card numbers (Stripe handles those and we never see them), location, contacts, call logs, messages or photo libraries;
• Your browsing outside this service — we run no third-party analytics or advertising SDK, and we do not buy data about you from anyone.

We do not use any of your content to train models, we do not sell personal data, and we do not carry out profiling or automated decision-making that produces legal or similarly significant effects for you.

The site sets one cookie:

Web fonts are bundled into the site at build time, so loading a page makes no request to any third-party host. You can delete the cookie in your browser; the effect is the same as signing out.

• Running the service: identifying accounts, checking entitlements, settling charges, delivering what you bought;
• Security: spotting anomalous sign-ins and abuse, rate limiting, mitigating attacks, diagnosing faults;
• Improving the product: aggregate statistics from anonymous telemetry showing which features get used and where people drop off;
• Handling your feedback: reading what you send, reproducing the problem, fixing it and replying to you;
• Legal obligations: keeping the tax and accounting records the law requires;
• Communicating with you: service changes, security incidents, changes to the terms.

We do not use the data for anything else. If we ever need to, we will ask for your consent separately. We do not use personal data for targeted advertising or differential pricing, and we do not send marketing email unless you ask us to.

We do not provide your personal data to third parties except as follows. Each of these acts as our processor or as an independent controller for its own purposes, under its own published terms.

Ενδέχεται επίσης να αποκαλύπτουμε δεδομένα όταν το απαιτεί ο νόμος: για συμμόρφωση με δεσμευτική απόφαση δικαστηρίου ή αρχής με δικαιοδοσία επί ημών, όταν είναι απαραίτητο για την προστασία ζωτικών συμφερόντων οποιουδήποτε προσώπου, ή όταν έχετε κοινοποιήσει сами сами τις πληροφορίες δημόσια. Όταν μας επιτρέπεται νομικά να σας ενημερώσουμε για τέτοιο αίτημα, θα το πράξουμε. Σε περίπτωση συγχώνευσης, διαίρεσης ή μεταβίβασης περιουσιακών στοιχείων, θα μεταβιβάζαμε τα προσωπικά δεδομένα μαζί με την επιχείρηση, ενημερώνοντας εκ των προτέρων για το όνομα και τα στοιχεία επικοινωνίας του παραλήπτη· ο παραλήπτης πρέπει να συνεχίσει να τηρεί την παρούσα πολιτική.

Η υπηρεσία αυτή λειτουργεί από το Χονγκ Κονγκ σε υποδομές στη Σιγκαπούρη και εξαρτάται από παρόχους σε άλλες χώρες. Εάν βρίσκεστε στον ΕΟΧ, στο Ηνωμένο Βασίλειο ή σε οποιαδήποτε χώρα με δικούς της κανόνες μεταφοράς δεδομένων, τα προσωπικά σας δεδομένα μεταφέρονται εκτός αυτής της χώρας στις ακόλουθες περιπτώσεις:

Where a transfer rests on your consent, you can withdraw it at any time — stop sending feedback, or switch the AI channel — and we stop the corresponding transfer. Withdrawal does not affect the lawfulness of what happened before it. You can ask us for a copy of the relevant transfer safeguards by email.

Beyond these periods we delete or anonymise. Where the law requires longer, the law governs.

• In transit: HTTPS is enforced site-wide;
• Passwords: stored as salted scrypt hashes — we cannot recover your original password;
• Account keys: only the hash and prefix are stored; the plaintext is shown to you once at generation and then exists nowhere in our systems;
• Payment card data: never touches our servers — it goes from your browser to Stripe;
• Model keys: stored encrypted;
• Access control: production access is limited to those who need it;
• Durability: financial data is written transactionally and backed up regularly.

No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where the risk is high, tell you directly.

If the GDPR, the UK GDPR or a comparable law applies to you, you have the following rights over the personal data we hold about you. We honour them for everyone, wherever you are.

• Access — find out whether we process data about you, what and why, and obtain a copy (Art. 15);
• Rectification — have inaccurate or incomplete data corrected; you can also edit your account details yourself (Art. 16);
• Erasure — have your data deleted where the purpose is fulfilled, you withdraw consent, you successfully object, or we have processed unlawfully. You can trigger this yourself by closing your account; the limits are in clause 8 (Art. 17);
• Portability — receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible (Art. 20);
• Restriction — have processing paused while a dispute about accuracy or lawfulness is resolved (Art. 18);
• Objection — object to processing based on our legitimate interests, including the security logging described in clause 2 (Art. 21);
• Withdraw consent — for anything based on consent, such as telemetry and feedback, at any time and without giving a reason (Art. 7(3));
• Not be subject to automated decision-making — we do not carry out any that produces legal or similarly significant effects (Art. 22);
• Complain to a supervisory authority — see clause 13.

How to exercise them: edit your details, revoke account keys, switch telemetry off, and close your account yourself from your account page. For anything else, write to saying which account you mean and what you want. We may ask you to verify your identity, and we will not ask for more identifying data than necessary to do so.

The Service is aimed at professionals and is not offered to anyone under 18. We do not knowingly collect personal data from children. If we learn that we hold data about a child, we delete it promptly.

A parent or guardian who becomes aware of such a case can reach us at and we will act on it without delay.

We may revise this policy. For substantive changes — new purposes, new categories of data, new recipients or new transfer destinations — we will notify you by website announcement and by email at least 30 days before they take effect, and we will seek fresh consent where the law requires it.

The effective date at the top of this page always reflects the current version. Earlier versions are available on request by email.

For any question, request or complaint about this policy or our handling of your personal data, write to . We reply within one month.

Please raise it with us first — most things are quicker to fix directly. But you do not have to, and you never lose the right to go elsewhere:

• If you are in the EEA, you may lodge a complaint with the data protection authority of the country where you live, where you work, or where the alleged infringement took place;
• If you are in the UK, with the Information Commissioner's Office;
• If you are in Hong Kong, with the Office of the Privacy Commissioner for Personal Data;
• Elsewhere, with whichever authority supervises data protection where you live.

You may also pursue a judicial remedy, or use the dispute resolution route set out in the Terms of Service.