This Privacy Policy explains how Atwork Solutions (“Atwork”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit our website, create an account, or use our workspace platform and related services (together, the “Service”). It also describes your rights and how to exercise them.
We are based in the Netherlands. If you do not agree with this Policy, please do not use the Service.
Data-protection law distinguishes between a “controller” (who decides why and how data is processed) and a “processor” (who processes data on a controller’s behalf). Our role depends on the data:
Where the GDPR applies, we rely on the following legal bases:
Atwork includes AI features that process your prompts and relevant workspace content to generate responses, summaries, drafts and automations for you. We do not sell your data, and we do not use your private Customer Content to train third-party or foundation models. Some AI features are powered by sub-processors that process content solely to return a result to you and under contractual terms that prohibit using it to train their models. We may use aggregated or de-identified data — which cannot reasonably be used to identify you — to operate and improve the Service.
When you sign in with Google or connect a Google integration, we access certain Google user data through Google APIs, with your permission. This section explains what we access, how we use it, who we share it with, and how long we keep it.
We do not use Google user data for advertising, and we do not sell it. Our AI features do not process Google user data: data synced from your connected Google account (such as Google Calendar events) is excluded from our AI features and is never transferred to our third-party AI providers, and Google user data is never used to develop, improve or train any AI or machine-learning model. The use of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We share Google user data only as needed to provide the Service: with the sub-processors that host and operate our infrastructure (listed at atwork.so/subprocessors), under confidentiality and data-protection obligations; within your workspace according to the permissions you and your administrators set; and where required by law. We do not otherwise transfer or disclose Google user data to third parties.
We keep Google user data only as long as needed to provide the features you use and while your account is active. You can revoke our access at any time by disconnecting the Google integration in Atwork or through your Google Account permissions at myaccount.google.com/permissions. When you disconnect an integration or delete your account, we delete or de-identify the associated Google user data within a commercially reasonable period, except where we must retain it to comply with legal obligations. You can also email [email protected] to request deletion.
Limited Use. Atwork’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect an Instagram professional account to Atwork, we access certain data from Instagram through Meta's Instagram Platform, with your permission. This section explains what we read and store, why, how long we keep it and how you can delete it.
We read only the data covered by the permissions you approve, and only when a feature you use needs it.
Media, insights and comments are fetched when a feature needs them and are kept in your workspace only where you or your workflows save them there.
We use Instagram data only to provide the features you turn on, for example publishing scheduled posts, showing post performance, or running workflows on new comments. We do not use it for advertising.
We keep the stored data until you disconnect the Instagram account or until we receive a deletion request from you or from Meta. We then delete the access token, account id and username for that account and stop the automation triggers that used it.
We do not sell Instagram data, and we do not use it to train AI or machine-learning models, ours or anyone else's. We share it only with the sub-processors that host and operate our infrastructure, within your workspace according to its permissions, and where the law requires.
We use:
You can control non-essential cookies through your browser settings or any cookie controls we provide.
We share personal data only as described here, and we never sell it:
We use a limited set of vetted sub-processors to deliver the Service. Our current sub-processors are listed at atwork.so/subprocessors. We require each to provide an adequate level of data protection.
We aim to store Customer Content in the region we tell you about. Where personal data is transferred outside your country or the European Economic Area, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses or an adequacy decision — to protect it. You can ask us for more information about these safeguards.
We keep personal data for as long as your account is active and as needed to provide the Service. After your account is closed, we delete or de-identify Customer Content within a commercially reasonable period, except where we must retain certain records to comply with legal, tax or accounting obligations, resolve disputes or enforce our agreements. You can request deletion as described below.
We use technical and organizational measures appropriate to the risk, including encryption of data in transit, access controls, least-privilege practices, logging and regular review. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authorities of a data breach where the law requires.
Depending on where you live, you may have some or all of the following rights over your personal data:
To exercise these rights, contact us at [email protected]. Where your data is Customer Content and we act as a processor, please direct your request to the workspace organization that controls it; we will support them. If you are in the EEA or UK and believe we have not handled your data properly, you may lodge a complaint with your local supervisory authority (for us, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)).
If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to request access to and deletion of your personal information, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights. To make a request, contact [email protected].
The Service is intended for organizations and people aged 16 and over. It is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
The Service may link to or integrate with third-party websites and services that we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them.
We may update this Policy from time to time. We will post the updated version here with a new effective date and, where the changes are material, take reasonable steps to notify you.
If you have questions or requests about this Policy or your personal data, contact us at [email protected], or by mail:
Atwork Solutions
19A, 2511 AT, The Netherlands