Privacy Policy

​

Who this policy covers

This policy explains how Workser collects, uses, discloses, and protects information when you use Workser on the web, Workser Desktop, and our marketing site and documentation (together, the “Services”).

​

Information we collect

• Account information — email, name, and profile image.
• Content you provide — web app designs and code, workflow definitions and execution data, business profile information, uploaded files, and prompts you send to AI agents and the outputs they generate.
• Connected-account credentials — OAuth tokens or API keys for third-party apps you connect, stored encrypted. We never store your third-party account password.
• Payment information — handled by our payment processor; we don’t store your card number.
• Computer-use data (Workser Desktop) — screenshots, window context, clipboard content when relevant, and the results of actions you approve. Every computer-use action requires your explicit approval before it executes.
• Workser Code data (Workser Desktop): connected coding agents use their configured provider accounts; the built-in Workser Code agent uses Workser-managed model access. Shared project records, source sync, deployment artifacts, configured environment values and usage records are processed as needed to provide those features. See Security & approvals for the data paths.
• Usage and diagnostic data — feature usage, billing/credit usage, and error diagnostics.

​

How we use information

We use this information to provide and operate the Services, authenticate you and enforce access control, process payments and billing, communicate with you, and detect and prevent fraud, abuse, and security incidents. We do not use your content — prompts, inputs, outputs, or uploaded files — to train or improve AI models for our general product or for any other customer, without your prior written consent.

​

How we share information

We share information only with the subprocessors who help us operate the Services (see our Subprocessor List), with your own connected integrations within the scope you authorize, and when required by law. We do not sell your personal information or your content.

​

International data transfers

Some subprocessors, including AI model providers, may process data outside your country of residence. We apply the safeguards required by applicable law for these transfers, and we’re finalizing specific region documentation for organizations that need it as part of a security review.

​

Data retention

Account data is retained while your account is active, and for a limited period after closure for fraud prevention, legal compliance, and dispute resolution. When you delete a project, we remove the underlying database and file storage for that project. On request, and consistent with your service agreement, we can confirm in writing once a deletion request has been fully processed.

​

Your rights

Depending on your location, you may have rights to access, correct, export, restrict, or delete your personal information, including rights under Thailand’s Personal Data Protection Act (PDPA) if applicable to you. To exercise these rights, contact [email protected].

​

Security

See our Security Whitepaper for the technical and organizational measures we apply.

​

Children’s privacy

The Services are not directed to children, and we do not knowingly collect personal information from children under the age required by applicable law.

​

Changes to this policy

We’ll notify you of material changes through the Services or by email before they take effect.

​

Contact

Questions about this policy: [email protected]. Security questions and responsible disclosure: [email protected].