Your Rights Under GDPR

Right to Access

You have the right to request copies of your personal data that we hold.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Right to Object

You have the right to object to our processing of your personal data, under certain conditions.

How We Process Your Data

We process your personal data in the following lawful ways:

Consent: We have your explicit consent to process your data for specific purposes
Contract: Processing is necessary for a contract we have with you
Legal Obligation: Processing is necessary for us to comply with the law
Vital Interests: Processing is necessary to protect someone's life
Public Task: Processing is necessary for a task carried out in the public interest
Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party

Data We Collect

We collect the following categories of personal data:

Identity Data: Name, username, profile picture
Contact Data: Email address, phone number
Technical Data: IP address, browser type, time zone settings
Usage Data: Information about how you use our service
Content Data: Documents, notes, and other content you create
Marketing Data: Your preferences in receiving marketing communications

Data Retention

We retain your personal data for as long as necessary to provide our service and fulfill the purposes described in this policy:

Account Data: While your account is active, or as needed to provide our service
Content Data: While your account is active, or as needed to provide our service
Usage Data: For up to 24 months to improve our service
Marketing Data: Until you ask us to stop sending marketing communications

When we no longer need your personal data, we will delete it or anonymize it.

International Data Transfers

We may transfer your personal data outside of the European Economic Area (EEA). Whenever we do so, we ensure a similar degree of protection by using appropriate safeguards.

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Encryption of data in transit and at rest
Regular security assessments and penetration testing
Access controls and authentication measures
Employee training on data protection
Incident response procedures

Contacting Our Data Protection Officer

You can contact our Data Protection Officer with any questions about this policy or your rights:

By email: dpo@WorkContextai.com
By post: Data Protection Officer, WorkContext, 123 Privacy Street, San Francisco, CA 94107

We will respond to your request within one month, though this may be extended by two months for complex requests.

GDPR Compliance