Workup AI, Inc. (“Workup,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with the Workup website at getworkup.ai (the “Site”).
Scope of this Policy. The Site does not accept document uploads. Client engagement documents are exchanged through secure channels established at engagement kickoff and are governed by the Client Engagement Documents section below and our Master Services Agreement.
By using the Site, you consent to the practices described in this Policy. If you do not agree, please do not use the Site.
1. Information We Collect
1.1 Information you provide. If you submit our contact form, we collect the information you enter: your name, email address, the target company’s industry, approximate deal size, and timeline. If you email us directly, we collect the contents of your message and your contact details.
1.2 Information collected automatically. Our hosting provider generates standard server logs when you visit the Site, which may include IP address, browser type, operating system, referrer URL, and timestamps. We also use privacy-friendly, cookieless analytics (Vercel Analytics) that records aggregated page views and visit statistics. It does not use cookies, does not track you across websites, and does not build individual profiles.
2. Client Engagement Documents
When you engage Workup for an analytical engagement, you provide financial and operating documents about a target business. These documents are used solely to perform your engagement. They are stored encrypted, accessible only to the reviewer of record, processed through enterprise AI services under agreements that prohibit training on customer data, retained for 90 days after report delivery to support lender and counterparty questions, and then deleted. You may request earlier deletion at any time; we confirm deletion in writing. Our Master Services Agreement governs the handling of engagement documents in the event of any conflict with this policy.
3. How We Use Information
- To respond to your inquiry and communicate with you about your deal or our services.
- To operate, maintain, secure, and improve the Site.
- To detect, investigate, and prevent fraud, spam, security incidents, and abuse.
- To comply with legal obligations and enforce our agreements.
We use your contact information to respond to you. We do not add you to marketing lists without your consent.
4. How We Share Information
4.1 We do not sell personal information. Workup does not sell personal information to third parties.
4.2 Service providers. We share information with vendors who perform services on our behalf, limited today to: Vercel (website hosting and cookieless analytics), Resend (delivery of contact form submissions to our business email), Google Workspace (our business email), and Dropbox (secure upload and storage of client engagement documents). These providers are bound by contractual obligations to use information only as needed to perform services for us and to maintain appropriate security.
4.3 Legal disclosures. We may disclose information when we believe in good faith it is required by law, legal process, or to protect the rights, property, or safety of Workup, our users, or the public. Where permitted by law, we will give you notice and an opportunity to contest disclosure.
4.4 Business transfers. If Workup is involved in a merger, acquisition, financing, restructuring, or sale of all or part of our business or assets, information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
4.5 With your consent. We may share information for any other purpose with your consent.
5. Data Security
We use commercially reasonable security measures designed to protect personal information, including encryption of data in transit (TLS) and limiting access to contact submissions to authorized personnel. No security measure is perfect, and we cannot guarantee absolute security.
6. Data Retention
Contact form submissions and email correspondence are retained as ordinary business records for as long as reasonably needed to respond to your inquiry, maintain our records, and comply with legal obligations. You may request deletion of your information at any time as described in Section 7.
7. Your Rights
7.1 General rights. Subject to applicable law, you may have the right to access, correct, delete, or port the personal information we hold about you, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.
7.2 California residents. California residents may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what categories of personal information we collect, the right to delete personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information (we do not sell personal information), and the right not to be discriminated against for exercising these rights.
7.3 EU/UK residents. If you are located in the European Economic Area or the United Kingdom, you may have rights under the GDPR or UK GDPR, including the rights described in Section 7.1. Our legal bases for processing are (a) our legitimate interests in operating the Site and responding to inquiries, (b) compliance with legal obligations, and (c) your consent where applicable.
7.4 How to exercise rights. To exercise any of these rights, contact us at gray@getworkup.ai. We will respond within the period required by applicable law. We may need to verify your identity before fulfilling certain requests.
8. Cookies and Tracking
The Site does not set cookies and does not use cookie-based tracking. Our analytics (Vercel Analytics) is cookieless and collects only aggregated, anonymized visit statistics. Because the Site does not track visitors across websites, “Do Not Track” browser signals do not change how the Site behaves.
9. Third-Party Links
The Site may contain links to third-party websites or services. We are not responsible for the privacy practices of such third parties. You should review their privacy policies before providing them with information.
10. Children’s Privacy
The Site is not intended for individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us at gray@getworkup.ai and we will delete it.
11. International Users
Workup is based in the United States, and the Site is operated from the United States. If you access the Site from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those of your jurisdiction.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via prominent notice on the Site. The “Effective” date at the top of this Policy indicates when it was last revised.
13. Contact Us
Questions, concerns, or requests regarding this Privacy Policy may be directed to:
Workup AI, Inc.
Attn: Privacy
14225 Hopewell Rd
Milton, GA 30004
Email: gray@getworkup.ai