Privacy Policy

The data controller is , a company incorporated in the Hong Kong Special Administrative Region under the Companies Ordinance (Cap. 622), , registered office .

For anything concerning privacy or data protection — including exercising your rights — write to . That address reaches the person responsible for data protection at our company.

This policy covers www.workdeck.ai, the desktop application, the Office add-ins and related services.

This policy exists in English and Chinese. In the event of any discrepancy, the English version prevails.

We collect on a "no more than needed" basis. The table sets out each category of personal data, what we use it for, and the legal basis we rely on under the GDPR and equivalent laws.

Where we rely on legitimate interests, we have weighed that interest against your rights and concluded it does not override them; the processing is limited to security and fault diagnosis, and you may object at any time under clause 10.

Providing the data marked as necessary for the contract is a condition of having an account: without it we cannot create or run one. Everything based on consent is genuinely optional.

The document and AI-conversation statements below concern local desktop use. The Office/WPS add-in processes documents and conversations through our hosted backend, as explained in clauses 6 and 8. Otherwise, we do not actively collect the following:

• Your documents, case files or project files and their contents — the desktop application is local-first and these stay on your device;
• Your desktop AI conversations — the desktop application talks to the model provider directly; hosted processing and retention for the Office/WPS add-in are covered separately in clauses 6 and 8;
• Special category data under Art. 9 GDPR: we neither ask for nor want data revealing health, ethnicity, political opinions, religion, trade union membership, sex life or biometric identifiers;
• Government identifiers, payment card numbers (Stripe handles those and we never see them), location, contacts, call logs, messages or photo libraries;
• Your browsing outside this service — we run no third-party analytics or advertising SDK, and we do not buy data about you from anyone.

We do not use any of your content to train models, we do not sell personal data, and we do not carry out profiling or automated decision-making that produces legal or similarly significant effects for you.

The site sets one cookie:

Web fonts are bundled into the site at build time, so loading a page makes no request to any third-party host. You can delete the cookie in your browser; the effect is the same as signing out.

• Running the service: identifying accounts, checking entitlements, settling charges, delivering what you bought;
• Security: spotting anomalous sign-ins and abuse, rate limiting, mitigating attacks, diagnosing faults;
• Improving the product: aggregate statistics from anonymous telemetry showing which features get used and where people drop off;
• Handling your feedback: reading what you send, reproducing the problem, fixing it and replying to you;
• ข้อผูกพันตามกฎหมาย: การเก็บรักษาบันทึกภาษีและบัญชีที่กฎหมายกำหนด;
• การสื่อสารกับคุณ: การเปลี่ยนแปลงบริการ เหตุการณ์ด้านความปลอดภัย และการเปลี่ยนแปลงข้อกำหนด

เราไม่ใช้ข้อมูลนี้เพื่อวัตถุประสงค์อื่นใด หากมีความจำเป็นในอนาคต เราจะขอความยินยอมจากคุณแยกต่างหาก เราไม่ใช้ข้อมูลส่วนบุคคลเพื่อการโฆษณาตามเป้าหมายหรือการกำหนดราคาแตกต่างกัน และไม่ส่งอีเมลการตลาดเว้นแต่คุณจะร้องขอ

เราไม่มอบข้อมูลส่วนบุคคลของคุณให้แก่บุคคลที่สาม ยกเว้นกรณีดังต่อไปนี้ โดยแต่ละรายทำหน้าที่เป็นผู้ประมวลผลข้อมูลของเรา หรือเป็นผู้ควบคุมข้อมูลอิสระเพื่อวัตถุประสงค์ของตนเอง ภายใต้เงื่อนไขที่ตนเองเผยแพร่

เราอาจเปิดเผยข้อมูลเมื่อกฎหมายกำหนด: เพื่อปฏิบัติตามคำสั่งที่มีผลผูกพันจากศาลหรือหน่วยงานที่มีอำนาจเหนือเรา เมื่อจำเป็นเพื่อคุ้มครองผลประโยชน์อันสำคัญยิ่งของบุคคลใดๆ หรือเมื่อคุณได้เปิดเผยข้อมูลต่อสาธารณะด้วยตนเอง หากกฎหมายอนุญาตให้เราแจ้งคุณเกี่ยวกับคำขอดังกล่าว เราจะแจ้งให้ทราบ ในกรณีควบรวมกิจการ แบ่งแยก หรือโอนย้ายสินทรัพย์ เราจะโอนข้อมูลส่วนบุคคลไปพร้อมกับธุรกิจ โดยจะแจ้งชื่อและช่องทางติดต่อของผู้รับให้คุณทราบล่วงหน้า และผู้รับต้องปฏิบัติตามนโยบายนี้ต่อไป

บริการนี้ดำเนินการจากฮ่องกงบนโครงสร้างพื้นฐานในสิงคโปร์ และขึ้นอยู่กับผู้ให้บริการในต่างประเทศ หากคุณอยู่ในเขต EEA สหราชอาณาจักร หรือประเทศใดๆ ที่มีกฎเกณฑ์การโอนข้อมูลของตนเอง ข้อมูลส่วนบุคคลของคุณจะถูกโอนออกนอกประเทศนั้นในกรณีดังต่อไปนี้:

Where a transfer rests on your consent, you can withdraw it at any time — stop sending feedback, or switch the AI channel — and we stop the corresponding transfer. Withdrawal does not affect the lawfulness of what happened before it. You can ask us for a copy of the relevant transfer safeguards by email.

Beyond these periods we delete or anonymise. Where the law requires longer, the law governs.

• In transit: HTTPS is enforced site-wide;
• Passwords: stored as salted scrypt hashes — we cannot recover your original password;
• Account keys: only the hash and prefix are stored; the plaintext is shown to you once at generation and then exists nowhere in our systems;
• Payment card data: never touches our servers — it goes from your browser to Stripe;
• Model keys: stored encrypted;
• Access control: production access is limited to those who need it;
• Durability: financial data is written transactionally and backed up regularly.

No system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where the risk is high, tell you directly.

If the GDPR, the UK GDPR or a comparable law applies to you, you have the following rights over the personal data we hold about you. We honour them for everyone, wherever you are.

• Access — find out whether we process data about you, what and why, and obtain a copy (Art. 15);
• Rectification — have inaccurate or incomplete data corrected; you can also edit your account details yourself (Art. 16);
• Erasure — have your data deleted where the purpose is fulfilled, you withdraw consent, you successfully object, or we have processed unlawfully. You can trigger this yourself by closing your account; the limits are in clause 8 (Art. 17);
• Portability — receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible (Art. 20);
• Restriction — have processing paused while a dispute about accuracy or lawfulness is resolved (Art. 18);
• Objection — object to processing based on our legitimate interests, including the security logging described in clause 2 (Art. 21);
• Withdraw consent — for anything based on consent, such as telemetry and feedback, at any time and without giving a reason (Art. 7(3));
• Not be subject to automated decision-making — we do not carry out any that produces legal or similarly significant effects (Art. 22);
• Complain to a supervisory authority — see clause 13.

How to exercise them: edit your details, revoke account keys, switch telemetry off, and close your account yourself from your account page. For anything else, write to saying which account you mean and what you want. We may ask you to verify your identity, and we will not ask for more identifying data than necessary to do so.

The Service is aimed at professionals and is not offered to anyone under 18. We do not knowingly collect personal data from children. If we learn that we hold data about a child, we delete it promptly.

A parent or guardian who becomes aware of such a case can reach us at and we will act on it without delay.

We may revise this policy. For substantive changes — new purposes, new categories of data, new recipients or new transfer destinations — we will notify you by website announcement and by email at least 30 days before they take effect, and we will seek fresh consent where the law requires it.

The effective date at the top of this page always reflects the current version. Earlier versions are available on request by email.

For any question, request or complaint about this policy or our handling of your personal data, write to . We reply within one month.

Please raise it with us first — most things are quicker to fix directly. But you do not have to, and you never lose the right to go elsewhere:

• If you are in the EEA, you may lodge a complaint with the data protection authority of the country where you live, where you work, or where the alleged infringement took place;
• If you are in the UK, with the Information Commissioner's Office;
• If you are in Hong Kong, with the Office of the Privacy Commissioner for Personal Data;
• Elsewhere, with whichever authority supervises data protection where you live.

You may also pursue a judicial remedy, or use the dispute resolution route set out in the Terms of Service.