Privacy Policy

ProjectWorks.ai ("ProjectWorks", "we", "us", or "our") operates an AI-assisted project delivery platform for construction, infrastructure, and professional services teams. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our website, create an account, or use our services (collectively, the "Service").

By using the Service, you acknowledge this Privacy Policy. If you do not agree, please do not use the Service. Enterprise customers may also be subject to a Data Processing Agreement (DPA) or order form that supplements this policy.

1. Information we collect

Information you provide

• Account data: name, email address, organization name, role, and authentication credentials managed through our identity provider.
• Workspace content: project briefs, tenders, contracts, plans, tasks, risks, schedules, budgets, documents, comments, and files you upload or generate.
• Communications: support requests, feedback, and correspondence with our team.
• Billing data: subscription details and payment information processed by our payment provider (we do not store full payment card numbers).

Information collected automatically

• Usage and diagnostics: feature usage, performance logs, error reports, and security events to operate and improve the Service.
• Device and browser data: IP address, browser type, and approximate location derived from IP for security and fraud prevention.
• Cookies: essential session and authentication cookies. See Section 8 below.

Information from third parties

• Identity providers: when you use SSO (e.g. Google Workspace, Microsoft Entra ID), we receive attributes your administrator configures (name, email, groups).
• SCIM provisioning: for enterprise accounts, your IT team may provision users and group memberships via SCIM 2.0.

2. How we use information

• Provide, maintain, secure, and personalize the Service.
• Process your inputs through AI systems to generate plans, documents, schedules, budgets, insights, and recommended actions.
• Authenticate users, enforce access controls, and prevent abuse.
• Process subscriptions, invoices, and account administration.
• Send service-related notices (security alerts, billing, product updates).
• Comply with legal obligations and enforce our Terms of Service.
• Improve reliability and develop new features using aggregated, de-identified analytics where possible.

3. AI processing

ProjectWorks.ai uses large language models and related AI services to assist with project planning and delivery. When you submit content for AI features:

• Relevant excerpts of your workspace data are transmitted to AI subprocessors solely to generate the output you request.
• We configure providers, where available, not to use your Customer Content to train general-purpose public models.
• AI outputs are probabilistic and may be incomplete or inaccurate. You are responsible for human review before relying on outputs in commercial, legal, or safety-critical contexts.
• Agency and Enterprise plans may include enhanced controls (e.g. audit logs, governance workflows). Contact us for enterprise AI terms.

For more detail on storage, retention, and isolation, see our Data Handling page.

4. Legal bases for processing (EEA / UK)

Where GDPR or UK GDPR applies, we rely on: (a) contract — to deliver the Service; (b) legitimate interests — security, fraud prevention, and product improvement balanced against your rights; (c) consent — for optional marketing where required; and (d) legal obligation — where law requires retention or disclosure. See our GDPR Information page.

5. Sharing and subprocessors

We do not sell personal information. We share data with service providers who assist us:

• Cloud hosting and database (e.g. Supabase)
• Authentication and SSO (e.g. Clerk)
• Payment processing (e.g. Stripe)
• Email and transactional messaging
• AI inference providers (e.g. OpenAI, Anthropic — depending on feature configuration)

Subprocessors are bound by contractual obligations consistent with this policy. Enterprise customers may request an up-to-date subprocessor list.

6. International transfers

We may process data in the United States and other countries where we or our subprocessors operate. For transfers from the EEA, UK, or Switzerland, we implement appropriate safeguards such as Standard Contractual Clauses and supplementary measures where required.

7. Retention

We retain account and workspace data while your account is active. After closure, we delete or anonymize data within a reasonable period, subject to backup cycles, legal holds, and statutory retention requirements. Audit logs on eligible enterprise plans may be retained per your organization's policy or our DPA.

8. Cookies and similar technologies

We use strictly necessary cookies for authentication, session management, and security. Optional analytics cookies, if deployed, will be described in a cookie notice and can be controlled through browser settings or consent tools where applicable.

9. Security

We implement administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is 100% secure. See our Security page for an overview.

10. Your rights and choices

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete personal information
• Export data in a portable format where technically feasible
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority

Submit requests to privacy@projectworks.ai. We may verify your identity before responding. If we process data on behalf of your employer, we may direct you to your organization as data controller.

11. Children

The Service is not directed to individuals under 16 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use after changes constitutes acceptance where permitted by law.

13. Contact

Privacy inquiries: privacy@projectworks.ai
Legal inquiries: legal@projectworks.ai