DeworkAI
中文

Privacy Policy

Privacy Policy

How DeworkAI collects, uses, and protects your data.

This English translation is provided for convenience. In case of any discrepancy, the Traditional Chinese version at /privacy prevails.

1. Who controls your data

DeworkAI is operated by an individual developer (not a registered company); the data controller is "the DeworkAI service (operated by an individual developer)", reachable at [email protected]. This policy explains what we collect, why, how it is used, and how you can exercise your rights.

2. What we collect

  • Account data: your email.
  • Conversations and history: your messages with the agent, and records of task execution.
  • Long-term memory: what the agent retains in order to serve you.
  • Usage records: calculation and consumption of AI usage credits.
  • Device/machine binding: the link between your desktop app and the local runner.
  • User settings: preferences such as theme and mode.

3. Why and how we use it

  • To provide the AI agent service and run the tasks you delegate.
  • To keep you signed in and your account secure.
  • To calculate and display your credit usage.
  • To improve service quality and stability.
  • To send transactional email (e.g. account notices).

4. The key point: agents run on your devices and accounts

DeworkAI's agents execute on your own devices (desktop app + local runner) and operate your own accounts — your Gmail, your browser sessions, your local files. Credentials for third-party accounts you connect are stored in an encrypted vault on your machine and are never uploaded to our cloud.

Note, however: your conversations and memory are stored in our cloud database and are sent to third-party AI inference providers to generate responses — meaning conversation content does leave our systems for processing before results return to you.

5. Third-party services we rely on

  • Supabase: authentication and database.
  • Railway: application hosting and compute.
  • Cloudflare: site hosting, CDN, and Turnstile human verification.
  • Resend: transactional email delivery.
  • Third-party large-language-model (AI inference) providers: your conversation content is sent to them to generate responses.
  • Google: when you sign in with Google or connect Gmail.

6. Cookies and local storage

We store the Supabase auth token plus your theme and mode preferences in browser localStorage. No third-party ad tracking.

7. Data retention

Account data is kept for as long as your account exists; conversation history is subject to periodic systematic cleanup. Email us any time to request earlier deletion.

8. Your rights

Under Taiwan's Personal Data Protection Act (Article 3), you have the right to:

  • Inquire about or review your data.
  • Request a copy.
  • Request supplementation or correction.
  • Request that collection, processing, or use be stopped.
  • Request deletion.

To exercise these rights, email [email protected] and we will respond within a reasonable time. Account deletion is currently a manual, email-initiated process; self-serve deletion is not yet available.

9. Data security

We enforce tenant data isolation; credentials for connected third-party accounts live in your local encrypted vault; irreversible actions (e.g. public posting, payments) require your explicit per-action confirmation.

10. Children and minors

The service is not designed for individuals under 18. Minors should use the service only with the consent of a legal guardian.

11. Changes to this policy

We may update this policy from time to time; updates will be posted on this page with an effective date. Questions? Email [email protected].