Privacy · Work Sailor

Version: draft-1

In short

Your company’s data lives on your own machine. None of your conversations or documents are stored with us.
On the Managed plan it is different: we run her on our servers, so her data is stored there. Section 4 says what that means.
Our server checks your licence. It knows the licence, a code for the machine, and your invoices.
When she thinks, the text of that one conversation is sent to the AI provider and the answer comes back.
We do not sell your data, share it, or use it to train AI models.
This website uses no cookies and no trackers.

1. Who is responsible for what

Work Sailor is provided by [the company’s legal name, to be added], [registered address, to be added].

Your company decides what she does and whose messages she handles: your team’s, and those of the clients, vendors and others who write to her number. As we understand India’s Digital Personal Data Protection Act, 2023, that makes your company the one responsible for that personal data, and us the provider of the software and of the licence service. [Roles to be confirmed by the lawyer; a data-processing agreement will be added.]

2. What stays on your machine

Every message she has seen, in the chats she is in
The link to WhatsApp
Your team list: names, numbers, roles, areas
Her library of your documents, her notes and her notebooks
Pictures, voice notes and files. A voice note is turned into text on your machine; the audio never leaves it
Saved website logins. A password can be typed in, never read back
Nightly backups of her database, and a copy in a second folder if you name one

None of this is stored with us. Phone numbers are never shown in full, even on her own dashboard.

What she refuses to keep. She never keeps identity documents, payslips, CVs or medical files, even if they are sent to her. She never writes down phone numbers, e-mail addresses, one-time codes, passwords, bank details, Aadhaar, PAN or GST numbers.

Encryption, said honestly. Her database can be kept encrypted, so that it cannot be read without a valid licence even by someone who copies the folder. We switch this on once it has been tried on your kind of machine; ask us whether it is on for yours. The link to WhatsApp, the library’s files and the media are ordinary files in the app’s folder for now. Protect the machine the way you protect your other company files.

3. What our server holds

What	Why
Your licence and its plan	So the app can run
A code worked out from the machine’s hardware. It contains nothing personal	So one licence runs on one machine
The times the app checked in (it checks every 15 minutes)	To keep the licence active
A protection report, if the app’s own protection notices something: the reason and, for changed files, their names	To suspend a licence that was tampered with, and to undo a false alarm
On plans with AI included: how much AI work each request used. Never the words	To keep the monthly allowance
What you type into this website’s forms: name, company, work e-mail, country, state, billing address, GST number if you give it	To send your key, write to you about your trial or plan, and make your invoice
Invoices: company name, GST number, amounts	Tax law
On the Managed plan: her address, which of our servers she runs on, whether she is running, and whether her WhatsApp is linked	To run her for you and to notice when she needs help

Nothing of your conversations, your documents or your team list, except on the Managed plan (section 4).

4. On the Managed plan

On the Managed plan we run her for you on servers we rent, instead of on a machine of yours. That changes where your data is.

Everything in section 2 is stored on our servers. The messages she has seen, the link to WhatsApp, your team list, her library, her notes, pictures, voice notes and files, saved website logins, and her backups. Voice notes are turned into text there. [The company that rents us the servers, and the country they are in, to be named here before launch.]
Who can see it. The people your company signs in on her dashboard, as on any plan. Our support staff can also sign in, to help: only with a one-time link from our own console, and for at most an hour each time. Every such sign-in shows in your activity, with the person’s name. The owner can switch this off on her Settings page; then nobody from us can sign in.
We do not read it otherwise. Nobody here looks at your conversations or documents except during a support sign-in you can see.
Your first sign-in needs a one-time link we e-mail to the address you bought with. It works once.
Backups are kept on our servers. [How many are kept, for how long, and whether they are encrypted: to be stated before launch.]
When the plan ends. [How long her data stays on our servers after the plan ends, how you can get a copy, and when it is deleted: to be set before launch.]

[On this plan we store and process the personal data in her chats on your company’s behalf. A data-processing agreement for it will be added.]

5. What goes to the AI provider

Her thinking is done by an AI model from Anthropic. Each time she thinks, the text she needs for that one conversation is sent and the answer comes back: the messages of that conversation, the parts of your documents and notes that her search found for it, and a picture or a document’s text when she is asked to read one.

On the Own AI key plan it goes from your machine straight to Anthropic, under your own account and Anthropic’s terms. It does not pass through us.
On plans with AI included it passes through our server on its way to Anthropic. Our server holds it only for the length of that request and keeps no copy of the words.

What the AI provider keeps, and for how long, is set by its own terms. [The provider’s current retention terms to be checked and stated here.] The provider’s servers may be outside India.

6. Other services she uses for you

WhatsApp. She sends and receives on your number like any linked device. WhatsApp’s own terms and privacy policy apply to that number.
Google, if you connect it. She reads Google Docs, Sheets, Slides and Drive files through your own Google sign-in, so she sees only what that account can see. With the permissions you give at sign-in she also adds rows and changes cells in Sheets, and reads and adds to the calendars that account can see. She never shares or deletes a file.
Your company mailbox, if you connect it. She looks at new mail for the standing orders that need it.
Web pages and websites. To read a link she fetches the page without signing in, and never opens a page that asks for a password. On plans with AI included, the page is fetched through our server. Website tasks run in a browser of her own on your machine (on the Managed plan, on our servers), with the logins you saved for her. When she looks something up on the web, the search is run by the AI provider, which receives the words searched for; you can switch this off in Settings.
Payments. Razorpay handles payments on its own page. Your card or UPI details are entered there, not on this website. We receive the result of the payment and what we need for your invoice.

[The companies that host our licence server and its database will be named here before launch.]

7. What we do not do

We do not sell or share your data.
We do not use it to train AI models.
We do not read or keep your conversations. Our support sees your text only if you send it to us yourself, for example in an e-mail asking for help. On the Managed plan your conversations are kept on our servers because she runs there, and our support sees them only during a sign-in that shows in your activity (section 4).

8. This website

No cookies, no trackers, no analytics, and nothing loaded from another company’s servers.
The trial and buy forms send what you type to our server, and nowhere else.
While you are buying, the reference of that purchase is kept in your browser tab so the thank-you page can tell you how the payment went. It is gone when you close the tab.
The company that hosts this website may keep ordinary server logs: the address a request came from, the time, the page.

9. The people who write to her

She reads the chats she is in. Tell your team, and the groups you put her in, that a digital employee reads those chats. If a client asks your company to forget them, that request is yours to fulfil: the dashboard lets the owner remove notes and documents.

Work Sailor is for businesses. It is not meant for handling children’s personal data.

10. Deleting your data

Write to us. Her data folder on your machine (on the Managed plan, on our servers, with its backups) is wiped, the licence is closed, and we remove every record about your company from our side within 30 days and confirm it to you in writing. On the other plans there is no copy of your conversations on our side to delete. Invoices are kept for as long as tax law requires, with the amounts and your company name only.

What the AI provider keeps of your conversations is governed by its own terms and, on the Own AI key plan, by your own account with it.

11. An honest limit

Software that runs on your own machine is as safe as that machine. If the machine is stolen while the app is active, or someone else can sign in to it, they can reach what she knows. Lock the machine, and tell us at once if it is lost: we suspend the licence, and she stops.

On the Managed plan she is as safe as our servers and as the passwords of the people who sign in to her dashboard. [How the servers are protected to be described here before launch.]

12. Questions about your data

Write to support@worksailor.in.