Política de IA de WebWork
1. Introduction
WebWork AI, Inc. ("WebWork," "we," or "us") provides AI-powered features ("WebWork AI") designed to help users understand productivity patterns, analyze workflows, automate insights, and improve team efficiency.
This AI Policy explains how WebWork AI works, how data is processed, and how privacy is protected.
This policy applies to all AI features within WebWork's platform, including the web app, desktop applications, mobile apps, and team chat integrations.
2. How WebWork AI Works
WebWork AI uses machine learning models to:
- Analyze time-tracking and activity data
- Generate insights, summaries, and recommendations
- Automate reporting and operational analysis
- Support individuals with productivity feedback
- Provide workspace-level trends when requested by workspace admins
WebWork AI does not make employment, disciplinary, or compensation decisions.
All AI outputs are advisory.
3. WebWork AI Data Usage & Privacy
3.1 AI Model Training
- WebWork does not use customer or workspace data to train AI models.
- AI processing occurs only within the workspace where the request is made.
- Data from different workspaces is never combined or used for shared modeling.
- Third-party providers, including OpenAI and Anthropic, cannot use WebWork data for model training.
3.2 AI Context & Processing
- WebWork AI currently uses OpenAI's and Anthropic's Claude API and may integrate additional vetted providers.
- Each request is processed only for the function the user started, with only the workspace data that function needs.
- WebWork keeps your conversations with WebWork AI as chat history in your workspace, so you can return to them. You and your workspace admins can delete them at any time. WebWork also keeps a record of each request (who asked, when, and what was sent) for a limited period, to review reported answers and to support you, and then deletes it.
- Providers process requests on WebWork's behalf under Data Processing Agreements. They may hold request data for up to 30 days for abuse monitoring, then delete it, and they never use it to train models.
3.3 Data Isolation
- AI processing is strictly workspace-isolated.
- AI responses belong to your workspace and are never shown to another workspace.
- WebWork does not sell, share, or expose workspace data to any AI provider beyond what is necessary to fulfill a specific request.
3.4 Screenshot, Activity, and Sensitive Data Handling
- AI systems have no access to screenshots, screen recordings, keystrokes, or similar data unless explicitly required by a specific AI feature and enabled by the user or admin.
- Sensitive data (e.g., health or financial information) is not processed unless the user includes it voluntarily in an AI prompt.
- When used by HIPAA-covered customers, AI features operate under HIPAA-compliant controls and Business Associate Agreements (BAAs).
4. Data Privacy and Compliance
AI-related data is protected under the same technical and organizational safeguards applied across the WebWork platform, including:
- Encryption in transit and at rest
- No model training and time-limited retention by third-party AI providers
- Role-based access control (RBAC)
- Strict segregation of workspace data
WebWork complies with:
- GDPR
- CCPA / CPRA
- HIPAA (for applicable customers)
Users may request data access, correction, deletion, or export in accordance with applicable regulations.
5. Human Oversight
- WebWork AI gives insights, data and recommendations. People make the decisions.
- Never evaluate, hire, fire, discipline or pay someone based only on what WebWork AI says. A person reviews and decides.
- WebWork AI only works with the data your workspace already tracks. It does not watch anything the admin has not turned on.
- WebWork AI does not guess personal things about people, such as health, religion, politics or pregnancy.
- Activity levels, timesheets and reports are normal tracking features, not AI. The Privacy Policy covers them.
6. Prohibited Uses
Users may not use WebWork AI to:
- Generate harmful, discriminatory, or abusive content
- Attempt to extract private or confidential information about others
- Perform automated employment or compensation decision-making
- Engage in surveillance beyond WebWork-approved functionality
- Conduct illegal or unethical activities
- Interfere with security systems or attempt to manipulate AI behavior
Violations may result in suspension or account termination.
7. Third-Party AI Providers and Sub-Processors
Certain WebWork AI features rely on secure third-party AI infrastructure providers.
These providers:
- Operate under binding Data Processing Agreements
- Cannot reuse or train on WebWork customer data, and hold it only as long as abuse monitoring requires (up to 30 days)
- Must meet WebWork's security and compliance requirements
A current list of AI-related sub-processors is maintained on our website.
7.1 Integration Data and Limited Use
Data that WebWork receives from third-party integrations (including Google Workspace, Microsoft 365, Slack, Jira, and any other connected service) is used solely to provide the specific features the user has enabled.
WebWork does not use data received from any integration to develop, improve, or train AI/ML models, and does not transfer such data to any third-party AI service.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
8. Data Retention
- Conversations with WebWork AI are kept as workspace chat history until you or a workspace admin deletes them.
- Request records at WebWork are kept for a limited period for abuse review and support, then deleted. Third-party AI providers delete request data within 30 days.
- Users and workspace admins may delete AI-generated content at any time.
HIPAA-related records are retained as required under HIPAA regulations.
9. User Controls
Workspace admins may:
- Enable or disable WebWork AI features
- Restrict access to specific AI capabilities
- Limit which roles or users can use AI
- Review or delete AI-generated content
Users may request access, correction, or deletion of personal data processed by AI.
10. Security Measures
WebWork applies multiple layers of protection to all AI-related components:
- End-to-end encryption
- Secure API gateways
- Misuse and anomaly detection
- Regular internal security reviews
- Comprehensive audit logging
- Vulnerability scanning and penetration testing, including AI endpoints
11. Responsible AI Principles
WebWork AI follows these principles:
- Privacy-first design
- Data minimization
- Security-by-default
- Transparency in how AI operates
- Human oversight and control
- Fairness and non-discrimination
12. Updates to This Policy
WebWork may update this AI Policy as AI capabilities evolve.
Changes will be communicated on our website or within the platform.
13. Contact
For questions about WebWork AI or privacy practices: