Privacy Policy

Introduction

TheyWork ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (theywork.co) and AI Worker services.

We are registered in England and Wales. For the purposes of UK data protection law, we are the data controller.

Please read this Privacy Policy carefully. By using TheyWork, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

Account Information

• Name and email address
• Company/organisation name
• Password (encrypted)
• Billing address

Payment Information

Payment card details are processed securely by our payment provider, Stripe. We do not store your full card details on our servers.

Communication Data

• Messages you send to your AI Worker
• Conversations and chat history
• Files or documents you share with your Worker
• Feedback and support requests

Business Information

• Information about your business that you provide to customise your AI Worker
• Preferences and settings

Information Collected Automatically

Usage Data

• Pages visited and features used
• Time spent on the platform
• Actions taken (clicks, interactions)
• Error logs and performance data

Device Information

• IP address
• Browser type and version
• Operating system
• Device identifiers

Cookies and Tracking

See our Cookie Policy for details.

How We Use Your Information

We use your information to:

Provide Our Services

• Create and manage your account
• Operate your AI Worker
• Process your messages and requests
• Store conversation history and Worker memory

Improve Our Services

• Analyse usage patterns
• Fix bugs and improve performance
• Develop new features
• Train and improve our AI systems (see AI Training section below)

Communicate With You

• Send service-related emails (receipts, alerts, updates)
• Respond to support requests
• Send product updates (you can opt out)

Process Payments

• Process subscriptions and purchases
• Send invoices and receipts
• Handle refunds

Legal and Security

• Comply with legal obligations
• Protect against fraud and abuse
• Enforce our Terms of Service

AI Training and Your Data

We may use anonymised and aggregated data from conversations to improve our AI services. However:

• We do not use your identifiable business data to train AI models
• We do not share your conversations with third parties for their AI training
• You can request deletion of your conversation history at any time

Our AI Workers use third-party AI providers (such as OpenRouter and various AI model providers). Your messages are processed by these providers to generate responses. These providers have their own privacy policies and data handling practices.

How We Share Your Information

We do not sell your personal information.

We may share your information with:

Service Providers

• Cloud hosting (Vercel, Supabase)
• Payment processing (Stripe)
• Email services (Resend)
• AI model providers (OpenRouter and underlying model providers)
• Analytics services

These providers only access your data to perform services on our behalf and are obligated to protect it.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights or property
• Prevent fraud or security issues
• Protect the safety of users or the public

Business Transfers

If TheyWork is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Retention

We retain your information for as long as your account is active or as needed to provide services.

• Account Data: Retained until you delete your account
• Conversation History: Retained until you delete it or close your account
• Payment Records: Retained for 7 years for tax and legal purposes
• Usage Logs: Retained for up to 2 years

When you delete your account, we will delete or anonymise your personal data within 30 days, except where we need to retain it for legal purposes.

Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restrict Processing — Request we limit how we use your data
• Data Portability — Request your data in a portable format
• Object — Object to certain processing of your data
• Withdraw Consent — Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@theywork.co.

We will respond to your request within one month. We may ask for verification of your identity before processing requests.

Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Secure data centres

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

International Transfers

Your data may be processed outside the UK by our service providers. Where this happens, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the UK ICO
• Adequacy decisions
• Other lawful transfer mechanisms

Children's Privacy

TheyWork is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on our website
• Updating the "Last updated" date
• Sending an email for material changes

Your continued use of TheyWork after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

Email: hello@theywork.co

Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113