Privacy Policy

Welcome to WorkforceAI ("we," "our," or "us"), operated by SVN Labs, a division of FifthBoston Holdings Corp. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI workforce automation platform.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, and password when you create an account.
• Billing Information: Payment card details and billing address, processed securely through Stripe.
• User Content: Text, prompts, documents, and other content you input into our AI tools.
• Communications: Messages you send to our support team or feedback you provide.

Information Collected Automatically

• Usage Data: Features used, actions taken, session duration, and interaction patterns.
• Device Information: Browser type, operating system, device identifiers, and IP address.
• Log Data: Access times, pages viewed, referring URLs, and system activity.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our services
• Process transactions and manage your subscription
• Send administrative communications (updates, security alerts, support messages)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to enhance user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

3. AI Model Training

Important: By default, we do not use your content to train AI models. Your prompts and generated outputs remain private.

If you opt into our product improvement program, anonymized and aggregated usage patterns (not your actual content) may be used to improve our service. You can opt out at any time in your account settings.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information in these limited circumstances:

• Service Providers: Trusted third parties who assist in operating our platform (hosting, payment processing, analytics). These providers are contractually bound to protect your data.
• AI Model Providers: We use OpenAI and Anthropic APIs. Your content is processed according to their business terms, which prohibit training on customer data.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

5. Data Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Strict access controls and authentication requirements
• SOC 2 Type II compliance (in progress)

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information as follows:

• Account Data: Retained while your account is active, deleted within 30 days of account closure.
• User Content: Retained while your account is active unless you delete it sooner.
• Usage Logs: Retained for 90 days for operational purposes.
• Billing Records: Retained for 7 years as required by tax law.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request limits on how we use your data

To exercise these rights, contact us at [email protected]. We respond to requests within 30 days.

8. International Transfers

Our servers are located in the United States. If you access our service from outside the US, your information will be transferred to and processed in the US. We use Standard Contractual Clauses and other safeguards for international data transfers.

9. Children's Privacy

WorkforceAI is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our platform. Your continued use after changes constitutes acceptance.

11. Contact Us

For privacy-related questions or concerns: