Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email address, and password when you create an account
• Profile Information: Optional information like job title, company, and career goals
• Payment Information: Billing details processed securely through our payment processors
• Communications: Messages you send us through support channels or feedback forms

1.2 Information from Platform Integrations

When you connect third-party platforms to Work Is Magic, we collect work-related data necessary to provide our services:

• Task Data: Task descriptions, due dates, status, and project information
• Communication Data: Work-related messages and their metadata (not personal conversations)
• Calendar Data: Meeting titles, durations, and attendee information for work events
• Activity Data: Work patterns, completion times, and collaboration frequency

1.3 Automatically Collected Information

• Usage Data: How you interact with our platform, features used, and time spent
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP addresses, timestamps, and error logs for service improvement
• Analytics Data: Aggregated usage patterns and performance metrics

2. How We Use Your Information

2.1 Core Service Delivery

• Analyze your work activities to identify professional skills and growth opportunities
• Generate personalized career development insights and recommendations
• Track your progress and provide gamified feedback through XP and achievements
• Synchronize data across your connected platforms

2.2 Platform Improvement

• Improve our AI algorithms and skill recognition accuracy
• Develop new features and enhance existing functionality
• Conduct research and analytics on aggregated, anonymized data
• Debug issues and optimize platform performance

2.3 Communication and Support

• Provide customer support and respond to your inquiries
• Send service notifications and important updates
• Share relevant tips and best practices for career development
• Process billing and account management requests

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Data

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

3.2 Limited Sharing Scenarios

We may share your information only in these specific circumstances:

• Service Providers: Trusted third parties who help us operate our platform (cloud hosting, payment processing, analytics)
• AI Processing: Email and task content is sent to our third-party AI provider (Google Gemini) to power classification, drafting, and other AI features
• Legal Requirements: When required by law, court order, or government request
• Safety and Security: To protect the rights, property, or safety of our users or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with user notification)

3.3 Aggregated Data

We may share aggregated, anonymized data that cannot be traced back to individual users for research, industry insights, or marketing purposes.

4. Data Security and Protection

4.1 Security Measures

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Strict role-based access with multi-factor authentication
• Infrastructure: Secure data centers with 24/7 monitoring
• Audits: Automated vulnerability scanning and continuous dependency monitoring

4.2 Strict Data Isolation

We ensure your data is strictly isolated and segregated. Access to your information is strictly limited to automated processes (like our AI models) and, when explicitly authorized by you, to our support team to resolve issues.

4.3 Data Breach Response

In the unlikely event of a data breach, we will notify affected users within 72 hours and provide clear information about what happened and what steps we're taking.

5. Your Privacy Rights and Controls

5.1 Access and Portability

• View all data we have about you through your account dashboard
• Export your data in standard formats (JSON, CSV) at any time
• Download reports of your career progress and skill development

5.2 Correction and Updates

• Update your profile information and preferences
• Correct inaccuracies in your skill assessments
• Modify your career goals and development targets

5.3 Deletion and Retention

• Delete specific data points or entire categories of information
• Request complete account deletion with immediate data removal upon confirmation
• Choose data retention periods for different types of information

5.4 Communication Preferences

• Opt out of marketing communications while keeping service notifications
• Choose frequency and types of insights you receive
• Customize notification preferences for different platforms

6. Platform Integration Privacy

6.1 OAuth Permissions

We use OAuth 2.0 for secure platform connections. You can review and revoke permissions at any time. We only request the minimum permissions necessary for our service.

6.2 Data Scope Limitations

• We only access work-related data relevant to skill development
• Personal conversations and private information are excluded
• We don't access or store sensitive business data like financial information
• Integration permissions can be modified or revoked without affecting other connections

6.3 Third-Party Privacy Policies

Your use of third-party platforms (Slack, Outlook, etc.) is also governed by their respective privacy policies. We recommend reviewing these policies to understand how your data is handled across all services.

7. International Data Transfers

7.1 Global Operations

Work Is Magic operates globally, and your data may be processed in countries other than your residence. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where available
• Binding Corporate Rules for intra-group transfers

7.2 European Privacy Rights

For users in the European Union, we comply with the General Data Protection Regulation (GDPR) and provide additional rights including data portability, the right to be forgotten, and explicit consent mechanisms.

8. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Cookies and Tracking

9.1 Essential Cookies

We use essential cookies for authentication, security, and basic platform functionality. These cannot be disabled without affecting service operation.

9.2 Analytics and Performance

We use analytics cookies to understand how users interact with our platform and identify areas for improvement. You can opt out of these in your privacy settings.

9.3 Marketing Cookies

Marketing cookies help us show relevant content and advertisements. These are optional and require your explicit consent.

10. Data Retention

10.1 Active Accounts

While your account is active, we retain your data to provide continuous service and track your career development over time.

10.2 Account Deletion

When you delete your account, we begin the data deletion process immediately:

• Personal data is deleted immediately upon confirmation
• Aggregated, anonymized data may be retained for research
• Some data may be retained longer for legal or security purposes
• Database backups containing historical snapshots are securely purged according to our infrastructure provider's retention schedule

10.3 Inactive Accounts

Accounts inactive for more than 2 years may be deleted after appropriate notice, unless you have an active subscription.

11. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will:

• Notify you of material changes via email or platform notification
• Post the updated policy on our website with the effective date
• Provide a summary of key changes when significant updates are made
• Obtain your consent for changes that expand our use of your data

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

13. Effective Date

This Privacy Policy is effective as of January 1, 2025. If you continue to use our services after this date, you acknowledge that you have read and agree to this Privacy Policy.