# Privacy Policy

Effective date: April 4, 2026

DIFFERENT AI, INC., doing business as OpenWork ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by OpenWork.

This Privacy Policy applies to our website ([openworklabs.com](https://openworklabs.com) and its associated subdomains), our Desktop App, and our Cloud Service (collectively, our "Service"). By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our [Terms of Use](/terms).

## Definitions and key terms

To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, are strictly defined as:

- **Cookie:** small amount of data generated by a website and saved by your web browser. It is used to identify your browser, provide analytics, remember information about you such as your language preference or login information.
- **Company:** when this policy mentions "Company," "we," "us," or "our," it refers to Different AI, (28 Geary St STE 650 Suite #188, San Francisco, California 94108, United States) that is responsible for your information under this Privacy Policy.
- **Country:** where OpenWork or the owners/founders of OpenWork are based, in this case is United States.
- **Customer:** refers to the company, organization or person that signs up to use the OpenWork Service to manage the relationships with your consumers or service users.
- **Device:** any internet connected device such as a phone, tablet, computer or any other device that can be used to visit OpenWork and use the services.
- **IP address:** Every device connected to the Internet is assigned a number known as an Internet protocol (IP) address. These numbers are usually assigned in geographic blocks. An IP address can often be used to identify the location from which a device is connecting to the Internet.
- **Personnel:** refers to those individuals who are employed by OpenWork or are under contract to perform a service on behalf of one of the parties.
- **Personal Data:** any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.
- **Service:** refers to the service provided by OpenWork as described in the relative terms (if available) and on this platform.
- **Third-party service:** refers to service providers, partners, and others who provide content, functionality, or services in connection with our Service, including analytics providers, payment processors, and authentication providers.
- **Website:** OpenWork's marketing website, which can be accessed via this URL: [openworklabs.com](https://openworklabs.com).
- **Desktop App:** the OpenWork desktop application, distributed for macOS, Windows, and Linux.
- **Cloud Service:** the OpenWork cloud-hosted web application, accessible via a web browser and providing functionality similar to the Desktop App.
- **You:** a person or entity that accesses or uses the Service.

## What Information Do We Collect?

The information we collect depends on which part of our Service you use. We distinguish between our Website, our Desktop App, and our Cloud Service.

### Website

When you visit our Website, we collect anonymous usage data (such as pages visited, interactions, and general navigation patterns) through PostHog, a third-party analytics platform. When you subscribe to our newsletter, we collect your email address. When you create an account or subscribe to a paid plan, we may collect:

- Name / Username
- Email address
- Payment information (credit or debit card numbers), processed and stored by our third-party payment processor
- Account authentication data received from third-party providers (Google or GitHub) if you choose to sign in using social login

### Desktop App

The Desktop App does not collect, track, or transmit any data during normal use. The only instance in which information is gathered is when you explicitly choose to report a bug. When you initiate a bug report, the following diagnostic information is attached to your submission solely to help us reproduce and resolve the issue:

- Application version
- OpenCode version
- Operating system name and version
- Platform identifier (e.g., MacIntel)
- Deployment type (e.g., desktop)
- Source and entry point within the App

This diagnostic data is submitted only with your affirmative action and does not include personal information, file contents, conversation data, or usage history. It is stored temporarily and deleted once the related issue is resolved.

### Google Workspace integrations

If you choose to connect Google Workspace to OpenWork, OpenWork requests only the Google OAuth scopes needed for the capabilities you enable. The initial Google Workspace integration uses Google OAuth to let OpenWork read your calendar events, create Gmail drafts for your review, and access only the specific Google Drive files that you select or create with OpenWork.

OpenWork uses Google Workspace data only to provide the user-facing features you request, such as preparing for a meeting, reading an explicitly selected Drive file, or creating a Gmail draft. OpenWork does not sell Google user data, use Google user data for advertising, or use Google user data to train generalized AI models. OpenWork does not expose a tool to automatically send email in the initial Google Workspace integration; Gmail access is used to create drafts that you can review in Gmail.

For the Desktop App, Google OAuth tokens are stored locally in the operating system's encrypted storage when available. For hosted or cloud-connected versions of OpenWork, Google OAuth tokens are stored in an encrypted token vault. You can disconnect Google Workspace from OpenWork to stop future access and remove stored OAuth credentials.

### Cloud Service

The Cloud Service does not track or profile user behavior. Like the Desktop App, the Cloud Service supports voluntary bug reporting with the same diagnostic data described above. In addition, the Cloud Service collects limited operational telemetry (such as service availability, error rates, and performance metrics) that is necessary for us to monitor and maintain the reliability and security of the service. This operational telemetry does not contain personal information or user content.

## Categories of Sources of Personal Data

We collect Personal Data about you from the following categories of sources:

- **Directly from you:** when you create an account, subscribe to a paid plan, subscribe to our newsletter, submit a bug report, or otherwise contact us.
- **Automatically:** when you visit our Website, through cookies and similar technologies (PostHog analytics), and through operational telemetry in the Cloud Service.
- **Third-party authentication providers:** when you sign in using Google or GitHub, we receive profile information (name, email, profile identifier) in accordance with the permissions you grant.
- **Third-party payment processors:** when you subscribe to a paid plan, we receive transaction confirmation data from Polar.

## How Do We Use The Information We Collect?

Any of the information we collect from you may be used in one of the following ways:

- To provide, operate, and maintain the Service
- To process transactions and manage your subscription
- To improve our Website based on anonymous analytics data
- To diagnose and resolve software defects using bug report diagnostic data
- To monitor and ensure the reliability, security, and performance of our Cloud Service
- To send newsletter communications to subscribers who have opted in
- To improve customer service (your information helps us to more effectively respond to your customer service requests and support needs)
- To comply with legal obligations

## Legal Bases for Processing Your Data

We process personal data only where a valid legal ground applies under each applicable privacy regime:

- **Performance of a Contract:** We process your data to provide, maintain, and support the Service you have requested under our Terms of Use, including account creation, subscription management, and customer support.
- **Legitimate Interests:** We use personal data to secure the platform, detect fraud, monitor Cloud Service reliability through operational telemetry, and improve our Website based on anonymous analytics, where these interests are not outweighed by your privacy rights.
- **Consent:** We rely on your consent for newsletter subscriptions, non-essential analytics cookies (PostHog), and customer audience targeting on advertising platforms. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- **Legal Obligations:** We retain and disclose information as necessary to comply with applicable laws, regulations, court orders, or other legal duties.

## When does OpenWork use information from third parties?

If you choose to authenticate using a third-party provider (Google or GitHub), we receive certain profile information from that provider, such as your name, email address, and profile identifier, in accordance with the permissions you grant during the authentication process. We use this information solely to create and manage your account. You can control what information third-party authentication providers share by reviewing your account settings with those providers.

We may also receive information from third-party payment processors in connection with subscription transactions, limited to what is necessary to confirm and manage your subscription.

## Do we share the information we collect with third parties?

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We engage trusted third-party service providers ("sub-processors") to perform functions and provide services to us. Our current sub-processors are:

- **PostHog** (analytics): collects anonymous website usage data on our behalf.
- **Polar Software, Inc.** (payments): processes subscription billing and credit card transactions.
- **Google** (authentication): provides OAuth sign-in services.
- **GitHub** (authentication): provides OAuth sign-in services.
- **Daytona** (infrastructure): provides virtual sandbox environments for the Cloud Service.

We share only the minimum information necessary to enable these providers to perform their services on our behalf and for you. Each sub-processor is contractually obligated to use your information solely for the purposes of providing services to us.

> **Note:** The Desktop App and Cloud Service allow you to connect your own API keys to third-party AI model providers (such as OpenAI, Anthropic, Google, and others). These providers are not our sub-processors — you interact with them directly using your own credentials and under their own terms of service and privacy policies. We do not transmit your data to these providers on your behalf.

If we are involved in a merger, acquisition, asset sale, or other business reorganization, we may share or transfer your personal and non-personal information to our successors-in-interest, provided that the receiving party agrees to honor the terms of this Privacy Policy.

We may also disclose personal and non-personal information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate in order to respond to claims, legal process (including subpoenas), to protect our rights and interests or those of a third party, the safety of the public or any person, to prevent or stop any illegal, unethical, or legally actionable activity, or to otherwise comply with applicable court orders, laws, rules and regulations.

## Where and when is information collected from customers and end users?

OpenWork will collect personal information that you submit to us. We may also receive personal information about you from third parties as described above.

## How Do We Use Your Email Address?

By submitting your email address on this website or by creating an account on our platform, you agree to receive emails from us, including onboarding communications, product updates, and newsletters. By signing up for our platform, we interpret your registration as an expression of interest in receiving additional communications related to the Service. We may send emails directly or through a third-party email service provider acting on our behalf.

We may, in the future, use your email address for customer audience targeting on third-party advertising platforms, where we would display custom advertising to specific people who have opted in to receive communications from us. If we do so, we will update this Privacy Policy accordingly and, where required by applicable law, obtain your consent prior to such use.

You can cancel your participation in any of these email lists at any time by clicking on the opt-out link or other unsubscribe option that is included in the respective email. We only send emails to people who have authorized us to contact them, either directly, or through a third party. We do not send unsolicited commercial emails. If, however, you have provided the same email to us through another method, we may use it for any of the purposes stated in this Policy.

If at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.

## How Long Do We Keep Your Information?

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by applicable law. Specific retention periods are as follows:

- **Customer account data** (name, email, authentication data): retained for the duration of your account. Upon account deletion, personal data is deleted within thirty (30) days, except where retention is required for fraud prevention, legal compliance, or legal defense.
- **Payment information:** retained by our third-party payment processor (Polar) for the duration of your subscription and as required by applicable financial regulations.
- **Bug report diagnostic data:** retained temporarily and deleted once the related issue is resolved.
- **Website analytics data:** retained by PostHog in accordance with PostHog's data retention policies.
- **Cloud Service operational telemetry:** retained only as long as necessary for monitoring and reliability purposes.
- **Backups:** deleted data may persist in backups for up to ninety (90) days before being permanently removed.

When we no longer need to use your information and there is no need for us to keep it to comply with our legal or regulatory obligations, we will either remove it from our systems or depersonalize it so that we can no longer identify you.

## How Do We Protect Your Information?

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. We offer the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our payment gateway provider's database only to be accessible by those authorized with special access rights to such systems, and are required to keep the information confidential. If you subscribe to a paid plan, your payment information is stored by our third-party payment processor for the duration of your subscription in order to process recurring charges. We do not directly store your full credit card number on our own servers. We cannot, however, ensure or warrant the absolute security of any information you transmit to OpenWork or guarantee that your information on the Service may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or managerial safeguards.

### Incident Response

In the event of a confirmed security breach involving your personal data, we will notify affected customers within seventy-two (72) hours of confirming the breach, in accordance with applicable law. Notification will be provided via email to the address associated with your account, and will include a description of the nature of the breach, the categories of data affected, and the measures taken or proposed to address it.

## Could my information be transferred to other countries?

OpenWork is incorporated in United States. Information collected via our website, through direct interactions with you, or from use of our help services may be transferred from time to time to our offices or personnel, or to third parties, located throughout the world, and may be viewed and hosted anywhere in the world, including countries that may not have laws of general applicability regulating the use and transfer of such data. To the fullest extent allowed by applicable law, by using any of the above, you voluntarily consent to the trans-border transfer and hosting of such information.

## Is the information collected through the Service secure?

We take precautions to protect the security of your information. We have physical, electronic, and managerial procedures to help safeguard, prevent unauthorized access, maintain data security, and correctly use your information. However, neither people nor security systems are foolproof, including encryption systems. In addition, people can commit intentional crimes, make mistakes or fail to follow policies. Therefore, while we use reasonable efforts to protect your personal information, we cannot guarantee its absolute security. If applicable law imposes any non-disclaimable duty to protect your personal information, you agree that intentional misconduct will be the standards used to measure our compliance with that duty.

## Can I update, correct, or delete my information?

The rights you have to request updates or corrections to the information OpenWork collects depend on your relationship with OpenWork. Personnel may update or correct their information as detailed in our internal company employment policies.

Customers have the right to request the restriction of certain uses and disclosures of personally identifiable information as follows. You can update or correct your profile information, change communication preferences, or request deletion of personal information maintained about you on our systems (subject to the following paragraphs). Such updates, corrections, changes and deletions will have no effect on other information that we maintain, or information that we have provided to third parties in accordance with this Privacy Policy prior to such update, correction, change or deletion. To protect your privacy and security, we may take reasonable steps (such as requesting a unique password) to verify your identity before granting you profile access, making corrections, or processing a deletion request. You are responsible for maintaining the secrecy of your unique password and account information at all times.

For account, workspace, or organization deletion, the primary method is self-service after signing in to the Service. Use the available account or workspace settings and destructive deletion controls for the account, workspace, or organization you want to delete. If you cannot sign in, cannot access the relevant workspace controls, or have a broader privacy request, contact us at [team@openworklabs.com](mailto:team@openworklabs.com).

If you are a member of an organization or workspace that is controlled by a customer or another organization owner, deleting your individual account removes or de-identifies user-owned personally identifiable information where reasonably practicable and deletes organizations or workspaces that you own where applicable. Limited information such as your name, corporate email address, role, activity records, audit logs, comments, historical references, and other organization-controlled data may remain visible to that organization or customer, or may be retained by us, where necessary to provide the Service, maintain security and audit records, comply with law, resolve disputes, enforce agreements, or follow the organization/customer's instructions.

We track and log deletion requests, including whether the request was completed through self-service controls or handled manually by our team.

You should be aware that it is not technologically possible to remove each and every record of the information you have provided to us from our system. The need to back up our systems to protect information from inadvertent loss means that a copy of your information may exist in a non-erasable form that will be difficult or impossible for us to locate. Promptly after receiving your request, all personal information stored in databases we actively use, and other readily searchable media will be updated, corrected, changed or deleted, as appropriate, as soon as and to the extent reasonably and technically practicable.

If you are an end user and wish to update, delete, or receive any information we have about you, you may do so by contacting the organization of which you are a customer.

## Personnel

If you are an OpenWork worker or applicant, we collect information you voluntarily provide to us. We use the information collected for Human Resources purposes in order to administer benefits to workers and screen applicants.

You may contact us in order to (1) update or correct your information, (2) change your preferences with respect to communications and other information you receive from us, or (3) receive a record of the information we have relating to you. Such updates, corrections, changes and deletions will have no effect on other information that we maintain, or information that we have provided to third parties in accordance with this Privacy Policy prior to such update, correction, change or deletion.

## Sale of Business

We reserve the right to transfer information to a third party in the event of a sale, merger or other transfer of all or substantially all of the assets of OpenWork or any of its Corporate Affiliates (as defined herein), or that portion of OpenWork or any of its Corporate Affiliates to which the Service relates, or in the event that we discontinue our business or file a petition or have filed against us a petition in bankruptcy, reorganization or similar proceeding, provided that the third party agrees to adhere to the terms of this Privacy Policy.

## Affiliates

We may disclose information (including personal information) about you to our Corporate Affiliates. For purposes of this Privacy Policy, "Corporate Affiliate" means any person or entity which directly or indirectly controls, is controlled by or is under common control with OpenWork, whether by ownership or otherwise. Any information relating to you that we provide to our Corporate Affiliates will be treated by those Corporate Affiliates in accordance with the terms of this Privacy Policy.

## Governing Law

This Privacy Policy is governed by the laws of United States without regard to its conflict of laws provision. You consent to the exclusive jurisdiction of the courts in connection with any action or dispute arising between the parties under or in connection with this Privacy Policy except for those individuals who may have rights to make claims under Privacy Shield, or the Swiss-US framework.

The laws of United States, excluding its conflicts of law rules, shall govern this Agreement and your use of the website/app. Your use of the website/app may also be subject to other local, state, national, or international laws.

By using the Service or contacting us directly, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, you should not engage with our website, or use our services. Continued use of the website, direct engagement with us, or following the posting of changes to this Privacy Policy that do not significantly affect the use or disclosure of your personal information will mean that you accept those changes.

## Your Consent

We've updated our Privacy Policy to provide you with complete transparency into what is being set when you visit our site and how it's being used. By using our website/app, registering an account, or making a purchase, you hereby consent to our Privacy Policy and agree to its terms.

## Links to Other Websites

This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by OpenWork. We are not responsible for the content, accuracy or opinions expressed in such websites, and such websites are not investigated, monitored or checked for accuracy or completeness by us. Please remember that when you use a link to go from the Services to another website, our Privacy Policy is no longer in effect. Your browsing and interaction on any other website, including those that have a link on our platform, is subject to that website's own rules and policies. Such third parties may use their own cookies or other methods to collect information about you.

## Cookies

We use "Cookies" to identify the areas of our Website that you have visited. A Cookie is a small piece of data stored on your computer or mobile device by your web browser. We deploy the following categories of cookies on our Website:

- **Strictly Necessary Cookies:** These cookies support core functions such as sign-in, session management, and security. They are essential for the Website to function and do not require consent.
- **Analytics and Performance Cookies:** We use PostHog to collect anonymous usage data (pages visited, interactions, navigation patterns) to measure feature adoption, diagnose errors, and improve the Website. These cookies are non-essential.
- **Functional Cookies:** These cookies remember your preferences (such as language or theme settings) to provide a more personalized experience.

The Desktop App and Cloud Service do not use cookies for tracking or analytics purposes. We never place Personally Identifiable Information in Cookies.

### Blocking and disabling cookies and similar technologies

You may set your browser to block cookies and similar technologies, but this action may block essential cookies and prevent our Website from functioning properly. You should also be aware that you may lose some saved information (e.g., saved login details, site preferences) if you block cookies on your browser. Different browsers make different controls available to you. Disabling a cookie or category of cookie does not delete the cookie from your browser; you will need to do this yourself from within your browser. Please visit your browser's help menu for more information.

### Do Not Track

Your browser may offer a "Do Not Track" option, which allows you to signal to websites that you do not wish to be tracked. Our Services do not currently support "Do Not Track" requests sent from a browser at this time.

## Payment Details

In respect to any credit card or other payment processing details you have provided us, we commit that this confidential information will be stored in the most secure manner possible.

## Kids' Privacy

The Services are not intended for individuals under the age of eighteen (18). We do not knowingly collect or solicit personally identifiable information from anyone under the age of eighteen (18). If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of eighteen (18) without verification of parental consent, we will promptly delete that information from our servers.

## Changes To Our Privacy Policy

We may change our Service and policies, and we may need to make changes to this Privacy Policy so that they accurately reflect our Service and policies. Unless otherwise required by law, we will notify you (for example, through our Service) before we make changes to this Privacy Policy and give you an opportunity to review them before they go into effect. Then, if you continue to use the Service, you will be bound by the updated Privacy Policy. If you do not want to agree to this or any updated Privacy Policy, you can delete your account.

## Third-Party Services

We may display, include or make available third-party content (including data, information, applications and other products services) or provide links to third-party websites or services ("Third-Party Services"). You acknowledge and agree that OpenWork shall not be responsible for any Third-Party Services, including their accuracy, completeness, timeliness, validity, copyright compliance, legality, decency, quality or any other aspect thereof. OpenWork does not assume and shall not have any liability or responsibility to you or any other person or entity for any Third-Party Services. Third-Party Services and links thereto are provided solely as a convenience to you and you access and use them entirely at your own risk and subject to such third parties' terms and conditions.

## Tracking Technologies

### Cookies

Our Website uses cookies in connection with PostHog analytics to collect anonymous usage data and to enhance the performance and functionality of the Website. These cookies are non-essential to the use of the Website. However, without these cookies, certain functionality may become unavailable or you would be required to enter your login details every time you visit the Website as we would not be able to remember that you had logged in previously. The Desktop App and Cloud Service do not use cookies for tracking or analytics purposes.

### Local Storage

Local Storage sometimes known as DOM storage, provides web apps with methods and protocols for storing client-side data. Web storage supports persistent data storage, similar to cookies but with a greatly enhanced capacity and no information stored in the HTTP request header.

### Sessions

We use "Sessions" to identify the areas of our Website that you have visited. A Session is a small piece of data stored on your computer or mobile device by your web browser.

### Operational Telemetry

The Cloud Service collects limited operational telemetry (such as service availability, error rates, and performance metrics) necessary to monitor and maintain the reliability and security of the service. This telemetry does not contain personal information or user content and is not used for behavioral tracking or profiling.

## Information about General Data Protection Regulation (GDPR)

We may be collecting and using information from you if you are from the European Economic Area (EEA), and in this section of our Privacy Policy we are going to explain exactly how and why is this data collected, and how we maintain this data under protection from being replicated or used in the wrong way.

### What is GDPR?

GDPR is an EU-wide privacy and data protection law that regulates how EU residents' data is protected by companies and enhances the control the EU residents have, over their personal data.

The GDPR is relevant to any globally operating company and not just the EU-based businesses and EU residents. Our customers' data is important irrespective of where they are located, which is why we have implemented GDPR controls as our baseline standard for all our operations worldwide.

### What is personal data?

Any data that relates to an identifiable or identified individual. GDPR covers a broad spectrum of information that could be used on its own, or in combination with other pieces of information, to identify a person. Personal data extends beyond a person's name or email address. Some examples include financial information, political opinions, genetic data, biometric data, IP addresses, physical address, sexual orientation, and ethnicity.

### The Data Protection Principles include requirements such as:

- Personal data collected must be processed in a fair, legal, and transparent way and should only be used in a way that a person would reasonably expect.
- Personal data should only be collected to fulfil a specific purpose and it should only be used for that purpose. Organizations must specify why they need the personal data when they collect it.
- Personal data should be held no longer than necessary to fulfil its purpose.
- People covered by the GDPR have the right to access their own personal data. They can also request a copy of their data, and that their data be updated, deleted, restricted, or moved to another organization.

### Why is GDPR important?

GDPR adds some new requirements regarding how companies should protect individuals' personal data that they collect and process. It also raises the stakes for compliance by increasing enforcement and imposing greater fines for breach. Beyond these facts it's simply the right thing to do. At OpenWork we strongly believe that your data privacy is very important and we already have solid security and privacy practices in place that go beyond the requirements of this new regulation.

### Individual Data Subject's Rights — Data Access, Portability and Deletion

We are committed to helping our customers meet the data subject rights requirements of GDPR. OpenWork processes or stores all personal data in fully vetted, DPA compliant vendors. Upon account deletion, we dispose of all personal data in accordance with our Terms of Use and this Privacy Policy within thirty (30) days. Backups may retain data for up to ninety (90) days before permanent removal.

You have the right to access, update, retrieve, and remove your personal data at any time. To exercise these rights, please contact us at [team@openworklabs.com](mailto:team@openworklabs.com).

## United States Resident Rights

This section applies to residents of states with applicable consumer privacy laws, including but not limited to California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Delaware (DPDPA), Iowa (ICDPA), Montana (MCDPA), Nebraska (NDPA), New Hampshire (NHPA), New Jersey (NJPA), Oregon (OCPA), Texas (TDPSA), Utah (UCPA), and Virginia (VCDPA). Where the specific rights afforded by these laws vary, we will apply the provision that is most protective of your Personal Data, to the extent reasonably practicable and not in conflict with applicable law in your jurisdiction.

Depending on where you live, you may have some or all of the following rights, subject to applicable legal exceptions and limitations:

- **Right to Know and Access.** You may submit a verifiable request for information regarding: (1) the categories of Personal Data we collect, use, or disclose; (2) the purposes for which we collect or use your Personal Data; (3) the categories of sources from which we collect Personal Data; and (4) the specific pieces of Personal Data we have collected about you. Where required by law, we will provide a copy of your Personal Data in a portable, machine-readable format.
- **Right to Delete.** You may submit a verifiable request to delete Personal Data that we have collected about you, subject to certain exceptions permitted by law (for example, data required for legal compliance or to complete a transaction you requested).
- **Right to Correct.** You may request that we correct inaccurate Personal Data we have collected about you.
- **Right to Opt Out.** You may opt out of the sale or sharing of your Personal Data, the processing of your Personal Data for targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell or share your Personal Data as defined under applicable state privacy laws, and we do not process your Personal Data for targeted advertising or profiling purposes.
- **Right to Equal Service.** We will not discriminate against you for exercising your privacy rights. We will not deny you our services, charge you different prices, or provide you a lower quality of service if you exercise your rights.

We do not sell the Personal Information of our users. We do not collect or process Sensitive Personal Information as defined under applicable state privacy laws.

### Exercising Your Rights

To exercise any of the rights described above, you or your authorized agent must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we collected Personal Data, and (2) describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. We will respond to your request within the time period required by applicable law (generally thirty (30) days, with extensions as permitted by law). We will not charge you a fee for making a request unless it is excessive, repetitive, or manifestly unfounded.

### Authorized Agent

If you are a resident of a state that permits it, you may authorize an agent to exercise your privacy rights on your behalf. To do so, you must provide your authorized agent with written permission, and we may request a copy of this written permission when verifying the agent's authority.

### Appeal Process

If we deny your privacy rights request, you may appeal our decision by emailing us at [team@openworklabs.com](mailto:team@openworklabs.com) within sixty (60) days of receiving the denial. Your appeal must include sufficient information to identify the original request and a description of the basis for your appeal. We will respond to your appeal within the time period required by applicable law. If we deny your appeal, you have the right to contact the Attorney General of your state.

## No Coding Advice

Our Services provide AI-assisted tools that can generate or suggest code, but they are not a substitute for professional software engineering judgment. You remain solely responsible for reviewing, testing, and validating any code or configuration produced by the Service. Reliance on AI-generated output is at your own risk. Intellectual property ownership, license terms, and usage restrictions are detailed in our [Terms of Use](/terms).

## Severability

If any provision of this Privacy Policy is found by a court of competent jurisdiction to be unlawful, void, or unenforceable for any reason, that provision shall be interpreted to achieve its intent as closely as possible under applicable law, or if that is not possible, shall be deemed severed from this Privacy Policy. The invalidity or unenforceability of any provision shall not affect the validity or enforceability of any other provision, and the remaining provisions shall continue in full force and effect.

## Entire Agreement

This Privacy Policy, together with our Terms of Use and any applicable supplemental terms, constitutes the entire agreement between you and OpenWork regarding privacy and data protection in connection with the Service. In the event of a conflict between this Privacy Policy and the Terms of Use on matters of data privacy or data protection, this Privacy Policy shall control.

## Contact Us

Don't hesitate to contact us if you have any questions.

- Via Email: [team@openworklabs.com](mailto:team@openworklabs.com)
