GDPR Information
Last updated: 16 June 2026
This page provides information for users in the European Economic Area and United Kingdom regarding the General Data Protection Regulation (GDPR) and UK GDPR.
Data controller
ProjectWorks.ai acts as data controller for account and billing data. For enterprise workspaces, your organization may act as controller for workspace content; we process it as processor under your instructions.
Lawful bases
- Contract: to provide the service you signed up for.
- Legitimate interests: security, fraud prevention, and product improvement.
- Consent: where required for optional marketing or analytics.
- Legal obligation: where we must retain or disclose data by law.
International transfers
Where data is transferred outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses with subprocessors.
Your rights
- Access, rectification, erasure, restriction, portability, and objection.
- Withdraw consent where processing is consent-based.
- Lodge a complaint with your supervisory authority.