Privacy Policy

We collect information to provide and improve our services. The types of information we collect include:

We use the information we collect for the following purposes:

• Service Delivery: Processing tickets, generating AI-powered updates, and managing your changelogs
• Email Campaigns: Sending update notifications to your contact lists as requested
• Account Management: Managing your subscription, billing, and account settings
• Platform Improvement: Analyzing usage patterns to enhance our AI models and platform features
• Customer Support: Providing technical assistance and responding to inquiries
• Security: Protecting against fraud, abuse, and security threats
• Legal Compliance: Meeting legal obligations and enforcing our terms of service

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services that help us operate our platform (OpenAI for AI processing, Stripe for payments, Resend for email delivery)
• API Integrations: With services you explicitly connect (Linear, Azure DevOps) as necessary to fetch your project data
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice
• Consent: With your explicit consent for any other purpose

We implement comprehensive security measures to protect your information:

• Encryption: All data is encrypted in transit using TLS and at rest using industry-standard encryption
• Access Controls: Strict authentication and authorization mechanisms limit access to your data
• Infrastructure Security: Our platform is hosted on secure, monitored cloud infrastructure
• Regular Audits: We conduct regular security assessments and vulnerability testing
• Employee Training: Our team is trained on data protection and privacy best practices
• API Security: All third-party integrations use secure authentication methods (OAuth, API keys)

Worknotes integrates with several third-party services to provide our functionality:

• OpenAI: Ticket content is processed through OpenAI's API to generate polished updates. This data is not used to train their models
• Linear/Azure DevOps: We access only the ticket data you authorize through secure API connections
• Stripe: Payment processing is handled securely by Stripe; we do not store credit card information
• Resend: Email delivery is managed through Resend's secure email infrastructure
• Supabase: Our database and authentication services are provided by Supabase with enterprise-grade security

Each integration is subject to their respective privacy policies and security standards. We ensure all partners meet our data protection requirements.

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data is retained while your account is active and you're using our services
• Account Deletion: When you delete your account, we retain your data for 30 days to allow for data recovery
• Complete Deletion: After 30 days, all personal data is permanently deleted from our systems
• Legal Requirements: Some data may be retained longer if required by law or for legal proceedings
• Backup Systems: Data in backup systems is automatically purged according to our retention schedule

You have several rights regarding your personal information:

• Access: You can view and download your data through your account dashboard
• Correction: You can update your account information and preferences at any time
• Deletion: You can delete your account and request removal of your data
• Portability: You can export your data in standard formats
• Opt-out: You can unsubscribe from marketing communications and disable certain data processing
• Integration Control: You can revoke access to third-party integrations at any time

To exercise these rights, please contact us at support@worknotes.ai or use the controls available in your account settings.

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for authentication, security, and basic platform functionality
• Preference Cookies: Remember your settings and customizations
• Analytics Cookies: Help us understand how you use our platform to improve our services
• Third-party Cookies: Some integrations may use their own cookies (subject to their policies)

You can control cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

Worknotes operates globally, and your information may be transferred to and processed in countries other than your own:

• Our primary infrastructure is located in the United States
• We ensure adequate protection through appropriate safeguards and contractual commitments
• Third-party service providers may process data in their respective jurisdictions
• All transfers comply with applicable data protection laws and regulations

Worknotes is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete personal information we have collected
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at support@worknotes.ai with your request.