Privacy notice

What we hold

• Your account: your email address and a securely stored form of your password, plus your two-step sign-in setting if you turn it on.
• Your AI and service connections: the name, address and model of each one, and the key you paste in. Keys are kept on our servers, are never shown back to you or anyone else in the browser, and are left out of data downloads.
• Your work: what you ask for, files you attach (we keep the text read from them, not the files), the plans, messages between your AIs, finished documents and software, versions, approvals and ratings.
• Usage records: each call made to your AIs, with its model, token count, timing and whether it worked, so we can show cost estimates, reliability and your daily allowance.
• Your profile, if you make one: the name, profile name, avatar choice, short description and website you enter, and whether it's public or private.
• What you post to Explore: posts, comments and likes, and any preview or code you choose to share with a post. Reports you make are kept so moderators can act on them; the person reported never sees who reported them.
• Technical reports: when something breaks, a short error report with the page and what went wrong, so we can fix it.

Why we use it

To run the service you signed up for: planning your requests, sending each step to your AIs, checking the results and keeping your work. That is necessary to provide Workfloor to you.

To keep Workfloor secure and working well, prevent abuse and fix faults, including reviewing reports about Explore and removing content that breaks our rules or the law. That is in our legitimate interests (and, for illegal content, our legal duties), and we keep it to what is needed.

We don't sell your data, use it for advertising, or use your work to train AI models.

Who it goes to

• The AI companies you connect, such as OpenAI or Anthropic. Each step of a job, with the material it needs, is sent to them using your own key and account. Their own terms and privacy policies apply to what they receive.
• The data services you connect. Workfloor sends them read requests with your key when a job needs their data.
• The AI service behind Workfloor's coordinator. To understand your request, plan the work and check each hand-off, Workfloor sends the request and the work to an AI service provided through our hosting platform, which uses models from companies such as Google and OpenAI.
• Official sources and checking services. For jobs that need official facts, Workfloor searches public services (GOV.UK, legislation.gov.uk, the Office for National Statistics, data.gov.uk and the World Bank) with a few search words taken from your request. A finished web page is sent to the W3C's validator to be checked, and research references are looked up at the DOI registry. None of them is sent your name, email or account.
• Our hosting and database provider, which stores your account and work on our behalf under contract.
• People you choose: teammates see the AIs and work you share with them (never your keys) and your profile name and avatar, and anyone with a read-only link you create sees that one document or app until you stop the link.
• Everyone, for what you publish: a public profile, and every post you publish to Explore with its title, description, tags and the AIs and APIs you list, can be seen by anyone on the web, including search engines. Your name and avatar show on your posts and comments even if your profile is private. Previews and code you choose to share can be opened by anyone signed in to Workfloor. You can take a post down or make your profile private at any time; copies others have already downloaded can't be recalled.

Some of these providers process data outside the UK. Where they do, we rely on the safeguards UK law requires, such as the UK's adequacy regulations or the standard contractual clauses.

How long we keep it

For as long as your account is open. You can delete any piece of work, connection or share link at any time. When you delete your account in Settings, your account and everything in it are deleted straight away; copies in our provider's backups are overwritten within their normal backup cycle.

Cookies and browser storage

Workfloor keeps you signed in and remembers settings such as Simple or Advanced view using your browser's storage. These are needed for the site to work. We don't use advertising or tracking cookies. Our hosting provider counts visits to public pages (for example page views, country and device type) without identifying you.

Your rights

You can ask for a copy of your data, have it corrected, have it deleted, object to or restrict how we use it, and take it elsewhere. You can download everything Workfloor holds for you and delete your account yourself in Settings. For anything else, contact us using the details below.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.

Age

Workfloor is for people aged 18 and over, because it works with paid accounts at AI companies.

Changes

If we change this notice in a way that matters, we'll tell you in Workfloor before the change applies.

Contact

Workfloor is run by William Martin, trading as Workfloor.

For any question or request about this page or your data, send a message on LinkedIn to Workfloor on LinkedIn or William Martin, founder. We reply within one month, as data protection law requires.