WorkTrackAI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service at worktrackai.com.
1. Information We Collect
Information you provide directly
- Email address (used for authentication and communication)
- Name (optional, used to personalize your experience)
- Work tasks, descriptions, and notes you log on the platform
- Organization names and roles you create
Information from Google Sign-In
When you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password or access to any Google services beyond your basic profile.
Automatically collected information
- Authentication tokens stored in secure HTTP-only cookies
- Basic server logs (timestamps, error logs) for service reliability
2. How We Use Your Information
- To authenticate you and maintain your session
- To store and display your work logs and task history
- To generate AI-powered summaries of your work using anonymized task data
- To send one-time login codes to your email address
- To improve the reliability and performance of the service
- We do not sell your personal data to third parties
- We do not use your work data to train AI models
3. AI Processing
WorkTrackAI uses third-party AI providers (currently Groq and NVIDIA) to generate summaries and enrich task descriptions. Your task content is sent to these providers solely to generate responses for you. We do not permit these providers to use your data for their own model training. AI-generated content is stored in your account and is only visible to you.
4. Data Storage and Security
- Your data is stored in MongoDB Atlas on secure, encrypted servers
- Authentication uses JWT tokens stored in HTTP-only, Secure, SameSite cookies
- All data in transit is encrypted via HTTPS/TLS
- One-time passwords (OTPs) auto-expire after 10 minutes and are deleted after use
- We apply rate limiting on authentication endpoints to prevent abuse
5. Data Retention
We retain your account data for as long as your account is active. Expired OTPs are automatically deleted within 10 minutes. You may request deletion of your account and all associated data at any time by emailing us at supportworktrackai@gmail.com.
6. Third-Party Services
We use the following third-party services:
- Google OAuth — for authentication. Subject to Google's Privacy Policy.
- MongoDB Atlas — for database storage. Subject to MongoDB's Privacy Policy.
- Groq / NVIDIA — for AI inference. Task content is processed but not retained by these providers.
- Gmail (SMTP) — for sending OTP emails.
7. Your Rights
- Access — You can view all your data within the application at any time.
- Correction — You can edit your name and task entries directly in the app.
- Deletion — Email us to request complete account and data deletion.
- Portability — Contact us to request an export of your data.
8. Children's Privacy
WorkTrackAI is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us at: supportworktrackai@gmail.com