Privacy Policy

This Privacy Policy defines the procedures for processing and protecting personal data of workbot service users (hereinafter — the "Service").

By using the Service, you agree to the terms of this Policy. If you disagree with any provisions, please stop using the Service.

We collect the following categories of data:

• Technical data: IP address, browser type, operating system, visit time, and request metadata (correlation ID, account when signed in, model, outcome, HTTP status, error class)
• Usage data: request and answer text; uploaded file contents and metadata (display name, MIME type, size, SHA-256 hash and provider identifier); token usage and cost
• Cookies: technical files for session management, and third-party analytics cookies (see section 6)

Collected data is used for:

• Providing core Service functionality (chat answers)
• Rate limiting (limiting the number of requests)
• Improving Service quality and fixing bugs
• Usage analysis for product development
• Protection against abuse and fraud

Depending on the selected model provider, chat messages are sent for LLM processing to the OpenAI API or the OpenRouter API. These providers process data according to their respective privacy policies: OpenAI privacy policy, OpenRouter privacy policy.

Attachments are sent only to OpenAI: they are uploaded through the OpenAI Files API and included in model requests through the OpenAI Responses API. OpenRouter remains text-only.

We also use analytics services (Google Analytics, Yandex Metrica) — they receive data about your visit, see section 6. We do not sell your data and do not pass it to anyone else for marketing purposes.

Technical request metadata is stored in PostgreSQL for 90 days without copying request text, response text, IP address, session identifier, error message or traceback into that audit table. Rate limiting data is stored in Redis with automatic deletion after 24 hours.

An uploaded source file is not placed in permanent local media storage: it exists in the application only during the multipart upload request, and any temporary upload copy is removed when that request finishes. OpenAI keeps the provider copy until our deletion job confirms its deletion. An unattached READY file is scheduled for deletion after 24 hours; an attached file is scheduled when its chat or owner account is deleted.

The Service has no endpoint for downloading an uploaded source file. After OpenAI confirms deletion, the source file cannot be recovered through the Service. Attachment metadata and provider-deletion audit records may be retained separately from the source file; billing records containing token usage and cost are retained for accounting and reconciliation.

We take reasonable measures to protect data: connection encryption (HTTPS), access restrictions, regular security updates.

Deleting a chat from your history removes the conversation and its messages from your account or session history. Separate product analytics records containing request and answer text, and financial records containing token usage and cost, are retained. To request complete deletion of personal data, contact us using the details in section 9.

Technical cookies necessary for the Service to operate:

We also use third-party analytics services to understand how the Service is used. They set their own cookies and receive data about your visit:

You can block analytics cookies with your browser settings or an ad blocker: the Service will keep working.

You have the right to:

• Request information about collected data
• Request deletion of your data
• Stop using the Service at any time

To exercise these rights, contact us using the provided contact information.

We may update this Policy. The current version is always available on this page. In case of significant changes, we will notify users through the Service interface.