This Privacy Policy explains how Tianwei Zhongxiang Technology (Tianjin) Co., Ltd. ("WorkDeep", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you use our desktop application, mobile application, and related cloud services (together, the "Services"). By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.
1. Information We Collect
1.1 Information You Provide
- Account information: email address, password (stored as a salted hash, never in plain text), display name, nickname, avatar, and optional profile details such as birthday or gender where you choose to provide them.
- Conversation content: messages, prompts, files, images, and other content you submit to the AI through the Services, including content you ask the AI to read, summarize, translate, or process.
- Voice recordings: audio you record for voice input or voice messages.
- Payment information: we do not store full payment card details. Payments are processed by third-party providers (including Apple App Store, Google Play, and Stripe) under their own privacy policies.
- Communications: information you provide when you contact support or participate in surveys or feedback.
1.2 Information Collected Automatically
- Usage data: interactions with the Services (features used, tasks run, messages sent), performance and error logs, and crash reports.
- Device data: device type, operating system, app version, language preference, and network information.
- Local storage: application preferences (such as theme and language) are stored locally on your device. Where you have signed in, a session token is stored securely on your device.
2. How We Use Your Information
We use your information for the following purposes:
- Providing the Services: generating AI responses, executing tasks you request (including scheduled and cloud-executed tasks), maintaining conversation history, and managing your account and subscriptions.
- Memory and personalization: with your consent where required, we store certain facts you share (such as your name, preferences, and business context) in a vector database to let the AI remember you across sessions and personalize responses. You can review or clear this memory at any time in the Services.
- Billing: processing payments, tracking usage-based credits ("deep" and "deeper" tiers), managing subscription plans, and preventing fraud.
- Security and integrity: detecting abuse, unauthorized access, and violations of our Terms of Service.
- Improvement: analyzing aggregated, de-identified usage to improve quality, reliability, and features.
- Legal compliance: complying with applicable laws, regulations, and legal processes.
3. Cloud Execution of Tasks
WorkDeep is designed to run most tasks on your own device. Some features offer optional cloud execution, which you must explicitly select for each task:
- When you choose cloud execution, only the task description/instructions you enter are transmitted to our cloud servers for processing; local files are not uploaded as part of this feature unless you separately attach them.
- Cloud-executed tasks are subject to the same content-usage rules as other conversation content described in this policy.
- You may disable or avoid cloud execution entirely by using local execution mode.
4. How We Share Information
We do not sell your personal information. We share information only in the following circumstances:
- Service providers: with vendors who help operate the Services (cloud hosting, AI model providers, push notifications, email delivery, payment processing, analytics). These providers are bound by confidentiality and may only process data to provide their services.
- AI model providers: conversation content is processed by third-party AI model providers to generate responses. We do not use your conversation content to train third-party foundation models.
- Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred, subject to this policy continuing to apply.
- Legal requirements: when required by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of WorkDeep, our users, or the public.
5. Data Retention
- Account data: retained while your account is active. You may delete your account at any time; we will delete or anonymize your personal data within a reasonable period (typically 30 days), except where retention is required by law.
- Conversation and memory data: retained to provide your conversation history and memory. You can delete individual conversations or clear your memory at any time from the Services.
- Logs and analytics: retained for security and debugging purposes for up to 12 months, after which they are deleted or aggregated.
6. Your Rights and Choices
Depending on your jurisdiction (including under the GDPR and the CCPA/CPRA), you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information (you can also update most information directly in your account settings);
- Delete your personal information and account;
- Export / portability — obtain a copy of your data in a structured, machine-readable format;
- Object or restrict certain processing, including withdrawing consent for memory features at any time;
- Opt out of marketing communications (we only send them with your consent, and every such message includes an unsubscribe option).
To exercise any of these rights, contact us at info@workdeep.ai. We will respond within 30 days. We may need to verify your identity before acting on your request.
7. Security
We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), hashing of passwords, access controls, and regular security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.
8. Children's Privacy
The Services are not directed to children under the age of 13 (or the higher minimum age under applicable law, such as 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at info@workdeep.ai and we will delete it.
9. International Data Transfers
Your information may be processed in jurisdictions other than your own, including the United States (where our cloud servers are located). When we transfer personal data across borders, we rely on appropriate safeguards (such as Standard Contractual Clauses) and take steps to ensure your information is treated consistently with this policy.
10. Cookies and Similar Technologies
Our websites and apps use cookies and local storage to authenticate you, remember preferences, and understand usage. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Services.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced through the Services (for example, by a notice or an updated "Last updated" date). Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Data controller: Tianwei Zhongxiang Technology (Tianjin) Co., Ltd. — Tianjin, People's Republic of China.