Privacy

At a glance

No training on your data

We never use your documents, prompts, code, or outputs to train or fine-tune AI models.

Complete data ownership

You retain full title, ownership, and intellectual property rights in all Tenant Data processed in your workspace.

Tenant isolation

Access to each tenant's data is checked through fine-grained authorization, and tenant documents are encrypted with a key dedicated to that tenant in AWS KMS.

Account erasure

When an account is deleted, our erasure process removes its access, its uploaded documents with their files and search entries, and its records in our main database. It keeps billing and audit records and does not yet reach every service; section 6 lists what remains.

1. Introduction and Operator

RPLogic, Inc. ("we", "us", "our") operates the Enterprise AI Platform, commercially branded as Wrk.Dog. We provide governed enterprise artificial intelligence solutions, multi-agent workflows, and secure knowledge retrieval systems.

This Privacy Policy explains how we process and safeguard information collected through our platform, our websites, and customer support.

2. Information We Collect

2.1 Account and identity information. We collect your name, work email address, organization name, and role. Sign-in is handled by Auth0, including sign-in with Google and enterprise single sign-on through Auth0 where your organization configures it.

2.2 Payment information. Payment card processing is handled directly by our PCI-DSS Level 1 certified partner, Stripe. We never store card numbers, security codes, or expiry dates. We keep only Stripe's reference identifiers; when you view a saved card, its brand and last four digits are fetched from Stripe and not stored.

2.3 Tenant content and metered telemetry. We collect knowledge documents uploaded to workspaces, prompt text, agent execution parameters, and metered usage records (compute time, token consumption, model invocations, and cryptographic audit receipts).

2.4 Technical information. When you use the platform, our hosting providers record technical data such as IP address, browser type, and the pages and services requested. The web application uses cookies to keep you signed in; it uses no advertising or analytics cookies. Its code editor loads open-source files from a public content-delivery network (jsDelivr), which receives your IP address and browser details.

3. How We Use Information

We use information only to:

• deliver, operate, and maintain the Wrk.Dog platform;
• enforce account budget policies, spending ceilings, and authorization gates;
• invoice your usage from Usage Records, on the billing period shown in your account;
• keep tamper-evident audit logs and investigate security events;
• send essential operational alerts, terms updates, and support responses.

We do not sell your personal data. We do not license or provide Tenant Data to third parties for advertising or profiling.

4. Subprocessors and Cloud Infrastructure

These providers process data for us to run the platform:

AI models run on Amazon Bedrock, including the embedding models that index documents for search. Amazon Bedrock's terms do not permit using your prompts or responses to train models. We do not use Tenant Data to train models.

If you connect your own accounts with other services, such as Google Drive, data moves between the platform and that service at your direction and under that service's terms.

5. Security Posture

We maintain administrative, technical, and physical safeguards, including:

• Encryption at rest: stored data is encrypted at rest, and tenant documents and messages are encrypted with a key dedicated to that tenant (an AWS KMS customer-managed key).
• Encryption in transit: connections to our public endpoints use TLS 1.2 or higher.
• Access control: administrative access is limited to named operators and is audited.
• Auditability: sign-ins, budget changes, and agent mission dispatches are written to a tamper-evident audit log. It is designed to support a future SOC 2 audit; we do not hold a SOC 2 report.

6. Data Retention and Tenant Offboarding

Tenant content is retained while your tenancy is active. After your tenancy ends:

• you may request an export of your Tenant Data, which we make available for at least 14 days after termination;
• after that, we run the platform's account erasure, which removes the account's members and access grants, deletes its uploaded documents and attachments with their stored files and search-index entries, and deletes the tenant's other records in our main platform database;
• for billing and audit, erasure keeps the account record, marked as deleted, with the account name, billing email address, billing address, and payment-processor reference; the audit log of actions taken in the account; the records of terms acceptance, in which the people who accepted are identified only by one-way pseudonyms; and any pseudonymised billing evidence (usage quantities and costs) and security evidence, which is kept for seven years;
• each person's sign-in profile (name and email address) also remains, because one person can belong to more than one account;
• account erasure does not yet reach chat conversations and their usage records, data-source connections (including their access tokens) and sync history, evaluation runs, or files that agent workspaces saved; these remain until they are deleted, and you can ask us to delete them;
• Stripe keeps its own payment records under its terms.

7. Your Rights and Contact

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate information;
• delete your personal account data, subject to the records we must keep;
• export your data in a portable, structured format.

For questions about this Privacy Policy, or to exercise these rights, including a request for data export or erasure, email hello@wrk.dog.