Privacy Policy

Last Updated: 14 Nov, 2025

1. Introduction & Scope

Purpose

This Privacy Policy explains how Workik Technologies LLP (“Workik,” “we,” “our,” or “us”) collects, uses, stores, shares, and protects information when you use our products, websites, browser extensions, APIs, integrations, or related software (collectively, the “Services”).
It also describes the choices available to you regarding the use of your personal data and how you can exercise your rights.

Scope

This Policy applies to:

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to the data-handling practices described here.

Relation to Other Documents

This Privacy Policy should be read together with our:

For enterprise deployments, any negotiated Data Processing Addendum (DPA), Service Level Agreement (SLA), or custom contract terms will take precedence over this Privacy Policy to the extent of any conflict.

2. Definitions

For the purposes of this Privacy Policy, many general terms (like "Services" or "Agreements") shall have the meanings given to them in our Terms of Service . Words used in the singular include the plural and vice versa.

The following terms are also central to this policy:

3. Information We Collect

Workik collects only the data necessary to operate and improve our Services while giving users meaningful control over what is shared. Collection is purpose-driven, limited in scope, and can be adjusted or disabled where applicable.

3.1 Information You Provide

We collect the information you choose to share directly with us, including:

3.2 Usage Data (Telemetry and Analytics)

To understand product performance and improve reliability, we collect limited telemetry and usage information, such as:

Telemetry is collected using Posthog and Google Analytics and can be turned off by navigating to: Profile Panel (top-right) → Data Preferences → Telemetry (uncheck).

When telemetry is disabled, only minimal operational logs required for security and abuse-prevention remain active.

3.3 AI Request Data

When you use AI-powered functionality, your prompt and context are securely transmitted to the selected AI infrastructure and model providers, including (but not limited to) OpenAI, Google Gemini, Anthropic, and Amazon Bedrock, used strictly to process your AI request.

3.4 Cookies and Tracking Technologies

Workik uses cookies and similar technologies to:

You can control or disable non-essential cookies through your browser or refer to our Cookie Policy for detailed instructions.

3.5 Third-Party Integrations and Linked Accounts

If you connect Workik with third-party services—such as developer tools, cloud storage providers, authentication platforms, or productivity applications—Workik may receive limited information (for example, your username, email address, or project identifiers) as allowed by the permissions you grant.

When you perform actions that rely on such integrations, Workik may temporarily access or process the related data (for example, repository files or cloud documents) solely to complete the requested task within the Service. This access is permission-based, limited in scope, and can be revoked at any time through your integration or account settings.

We request only the minimum data required for these integrations to function and do not retain or use that data for any other purpose.

3.5.1. Integration with Google Services

For users who connect Workik with Google products such as Drive, Gmail, or Calendar, our access, use, and transfer of Google user data follow the Google API Services User Data Policy , including the Limited Use requirements.

4. How We Use Your Information

Workik uses collected information to operate, secure, and enhance the Services in a manner consistent with applicable laws and user expectations. We do not sell or rent personal data to any third party.

4.1. Service Delivery and Account Management

We use your information to:

This processing is necessary for the performance of our contract with you.

4.2. AI Request Processing

Your prompts and contextual data are used solely to generate requested AI outputs through selected AI providers (as listed in Section 3).

4.3. Service Improvement and Analytics

We analyze aggregated telemetry, usage logs, and feedback to:

This processing is based on Workik’s legitimate interest in improving its Services while protecting user privacy.

4.4. Communication and Engagement

We may use your contact information to:

You may opt out of non-essential or promotional messages at any time through your email preferences or by contacting support@workik.com .

4.5. Security, Fraud Prevention, and Legal Compliance

We use certain information to:

This processing is necessary to safeguard both users and the platform.

4.5.1. Data Breach Notification:

In the event of a data breach or security incident that may impact your personal information or rights, Workik will promptly investigate the matter and, where required by law, notify you and the appropriate authorities in accordance with applicable data protection regulations.

4.6. Enterprise Usage and Plan Management

For team or enterprise accounts, Workik may use usage metrics and aggregated statistics to:

Data used for these purposes is aggregated or pseudonymized where possible.

5. Legal Bases for Processing

Workik processes personal data in accordance with applicable data protection laws. Depending on the nature of your interaction with the Services, Workik may rely on one or more of the following lawful bases:

5.1. Performance of a Contract

When you register an account, subscribe to a plan, or use the Services, we process your information as necessary to deliver the requested functionality, maintain access, and provide support.

5.2. Legitimate Interests

We process certain data to improve and secure the Services — such as maintaining performance, preventing fraud, and understanding usage patterns. We balance these interests against your privacy rights and limit such processing to what is necessary and proportionate.

5.3. Consent

In situations where the law requires consent — such as for analytics cookies, optional telemetry, or marketing communications — we rely on your explicit consent before processing that data. You may withdraw this consent at any time through your account settings, email preferences, or browser controls.

5.4. Compliance with Legal Obligations

We may process or retain certain data where required by applicable law, such as tax records, billing documentation, or to respond to lawful requests from authorities.

5.5. Protection of Rights and Security

We may process data to protect the rights, property, or safety of Workik, its users, or others — including in cases of misuse, fraud detection, or security investigations.

6. Sharing & Disclosure of Information

Workik does not sell, rent, or trade personal data. We share limited information only with trusted third parties when necessary to operate the Services, comply with the law, or protect our rights.

A current list of our subprocessors is available at: https://workik.com/Subprocessors.pdf

6.1. Service Providers and Subprocessors

We engage carefully selected service providers (“Subprocessors”) who process data on our behalf to support core operations, such as:

Each provider is contractually bound to maintain confidentiality, apply appropriate security measures, and process data only for the purposes instructed by Workik. A current list of subprocessors is available upon request to enterprise customers.

6.2. Third-Party Integrations Chosen by You

When you connect third-party integrations—such as developer tools, cloud storage, or authentication providers—Workik shares and processes data strictly as necessary to enable that integration. This access is permission-based, revocable, and governed by your consent to both Workik’s and the integration provider’s policies.

6.3. Legal and Regulatory Disclosures

We may disclose information if required to:

Where permitted, we will notify affected users before disclosing information in response to legal requests.

6.4. Business Transfers

If Workik undergoes a merger, acquisition, restructuring, or sale of assets, user data may be transferred as part of that transaction. In such cases, we will ensure that any successor entity upholds equivalent privacy protections.

6.5. Aggregated or Anonymized Data

We may share aggregated or anonymized statistics—such as overall usage trends or performance metrics—that do not identify any individual user. Such information is used for analytics, research, or service improvement and does not constitute personal data.

7. International Data Transfers & Safeguards

Workik operates globally and uses infrastructure and third-party services that may process data outside your country of residence. By using the Services, you acknowledge that your data may be transferred to and processed in countries that may have data protection standards different from those in your jurisdiction.

7.1. Data Storage and Processing Locations

Workik stores and processes data using secure cloud infrastructure located in the United States. If you access the Services from outside the U.S., your data may be transferred to and processed in a jurisdiction with different data protection laws. Workik uses recognized legal safeguards—such as Standard Contractual Clauses—to ensure that such transfers comply with applicable requirements and that your data remains protected.

Certain processing activities may also occur through third-party providers (for example, AI model or analytics services) hosted in other regions to ensure performance and reliability.

All such transfers are governed by appropriate legal mechanisms and security safeguards designed to ensure your data remains protected regardless of location.

7.2. Safeguards for International Transfers

When personal data is transferred internationally, Workik relies on one or more of the following mechanisms to ensure compliance with applicable laws:

7.3. AI Provider Data Handling

When using AI-powered functionality, your input and contextual data may be processed by third-party AI infrastructure providers located outside your country or region. These providers process such data solely for the purpose of generating requested outputs and are contractually required (through their respective terms and APIs) to apply strong confidentiality and security standards.

7.4. User Rights and Transparency

Users from jurisdictions with data transfer regulations (e.g., the EU, UK, or India) may contact support@workik.com to request additional details about the safeguards Workik applies for cross-border data transfers or to obtain a copy of the applicable contractual clauses.

8. Security Measures

Workik applies technical and organizational measures to protect user data from unauthorized access, loss, or misuse. These safeguards are designed to maintain the confidentiality and integrity of your data while supporting platform reliability.

Our security controls include:

While no system can guarantee absolute security, Workik continually reviews and strengthens its security and access practices to align with industry standards.

9. Data Retention & Deletion

Workik retains personal and workspace data only for as long as necessary to deliver the Services, comply with legal obligations, and maintain platform security. When data is no longer required for these purposes, it is securely deleted or anonymized.

9.1. Workspace, Project, and Account Deletion

You can delete your workspace, project, or account at any time. Deletion triggers the permanent removal of associated data from Workik’s active systems, including project files, prompts, generated content, and workspace preferences. Once deletion is confirmed, this data cannot be recovered.

In certain cases, limited metadata (such as billing or transaction records) may be retained where required by law or for legitimate business purposes, such as dispute resolution or auditing.

9.2. Context-Level Data and AI History

Data generated or stored as part of AI interactions—such as prompts, context, or request logs—is retained only for the duration necessary to provide the requested output or to ensure service stability. If your workspace or project is deleted, all associated AI context data is also removed from Workik’s systems.

Where AI providers process data independently (as described in Section 6), they apply their own retention and deletion timelines as specified in their privacy policies.

9.3. Telemetry, Logs, and Security Data

Operational logs and telemetry data are retained for limited periods to monitor system performance, ensure security, and diagnose issues. Such data is automatically purged or anonymized after the retention period unless required for ongoing investigation or regulatory compliance.

9.4. Enterprise and Compliance Retention

For enterprise customers or regulated deployments, data retention and deletion timelines may be governed by a separate Data Processing Addendum (DPA) or Service Level Agreement (SLA). In such cases, the contractual terms will prevail.

10. Your Rights & Controls

Workik respects your right to control your personal data. Depending on your jurisdiction and the nature of your use of the Services, you may have certain rights regarding how your information is collected, used, and retained.

10.1 Access and Portability

You can request confirmation of whether Workik processes your personal data and obtain a copy of the information associated with your account. Where technically feasible, you may also request that we provide your data in a structured, commonly used, and machine-readable format.

10.2 Correction and Updates

You can review and update your account details—such as your email address, workspace name, or billing information—directly through your account settings. If any data is inaccurate or incomplete, you may request correction by contacting support@workik.com .

10.3 Deletion and Right to Be Forgotten

You can delete your workspace, projects, or account at any time from within the platform. Once deleted, all associated data is permanently removed from Workik’s active systems in accordance with our Data Retention & Deletion policy. In some cases, we may retain limited records required for legal or billing compliance.

10.4 Consent Withdrawal and Opt-Out Options

If you have provided consent—for example, for telemetry, analytics, or marketing communications—you may withdraw it at any time by:

Withdrawal of consent does not affect processing performed before withdrawal.

10.5 Objection and Restriction of Processing

You may object to certain types of processing, such as analytics or product improvement activities, if you believe they affect your fundamental rights. Workik will evaluate each request and, where required by law, stop or limit the relevant processing.

10.6 How to Submit a Request

You can exercise your rights by contacting us at support@workik.com with “Privacy Request” in the subject line. For your protection, we may require verification of your identity before fulfilling the request. We respond within a reasonable timeframe consistent with applicable laws.

10.7 Enterprise Users

If you access Workik through an organization or enterprise subscription, certain rights may be managed by your workspace administrator or governed by your organization’s agreement with Workik. We recommend contacting your administrator first for access or deletion requests related to enterprise workspaces.

11. Cookies & Tracking

Workik uses cookies and similar technologies to enhance user experience, secure accounts, and understand product usage. Cookies are small text files stored on your device that help us recognize you, remember preferences, and improve service performance.

11.1 Types of Cookies We Use

11.2 Managing Cookies

You can manage or disable non-essential cookies directly through your browser settings. Some features may not function properly if certain cookies are disabled.

For more detailed information on the specific cookies used and how to manage your preferences, please refer to our Cookie Policy .

12. Children’s Privacy

Workik’s Services are intended for individuals who are at least 18 years of age or the age of legal majority in their jurisdiction, whichever is higher. We do not knowingly collect or process personal data from individuals under this age.

If we become aware that a child has provided personal information in violation of this Policy, we will take steps to delete such information and, where appropriate, terminate the associated account. Parents or guardians who believe their child may have provided personal data to Workik can contact us at support@workik.com to request its removal.

13. Changes to This Policy

Workik may update this Privacy Policy from time to time to reflect changes in our Services, business practices, or applicable laws. Whenever updates are made, the “Last Updated” date at the top of this page will be revised accordingly.

If a change materially affects how we collect or use your personal data, we will notify you through one or more of the following methods:

Your continued use of the Services after any update becomes effective constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

14. Enterprise & Custom Terms

For enterprise or regulated customers, Workik may offer additional contractual terms that expand on the commitments described in this Privacy Policy.

14.1 Data Processing Addendum (DPA)

Business and enterprise customers who process personal data through Workik in connection with their own end users may request a Data Processing Addendum (DPA). The DPA governs Workik’s role as a data processor and includes details on security practices, subprocessors, data deletion, and international transfer safeguards.

Copies of the standard DPA can be provided to eligible customers upon request through support@workik.com .

14.2 Service Level Agreement (SLA)

Service Level Agreements are available only for qualified enterprise deployments that require defined uptime guarantees, support response times, or region-specific infrastructure. SLA terms are negotiated individually and become binding only once executed as part of a signed enterprise agreement.

14.3 Precedence of Terms

If you have entered into a DPA, SLA, or other written agreement with Workik, the terms of that executed contract will prevail to the extent of any inconsistency with this Privacy Policy.

15. Contact Information and Grievance Redressal

15.1 General Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or Workik’s data handling practices, you can contact us at:
Workik Technologies LLP 
📍 1st Floor, 18/J New No. 78, Jayanagar 5th Block, 40th Cross, Jayanagar, Bengaluru, Karnataka 560041, India 
📧 Email: support@workik.com
🌐 Website: https://workik.com

For privacy-specific inquiries, please include “Privacy Request” in the subject line so we can route your query appropriately. If your concern relates to a data protection request, Workik may require verification of your identity before responding to ensure your data remains secure.

15.2 Grievance Officer (India)

In accordance with India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023, we have a dedicated Grievance Officer.

If you are a user in India and have any grievance or complaint regarding your rights, the processing of your personal data, or any content on our platform, please contact our Grievance Officer:

Name: Tanvi Gandhi
Email: tanvi@workik.com
Address: 1st Floor, 18/J New No. 78, Jayanagar 5th Block, 40th Cross, Jayanagar, Bengaluru, Karnataka 560041, India

The Grievance Officer will acknowledge your complaint within twenty-four (24) hours and will resolve the complaint within fifteen (15) days from the date of its receipt.