1. Scope of this policy
This policy applies to BobsWork, Inc. ("BobsWork", "we", "us") and to the products, websites, and services we operate under the BobsWork brand — including the BobsWork web application, BobX Command Center, BobConnect, BobLeads, BobOperator, and all Standard AI Workers described on our pricing pages.
It does not cover third-party services you connect through BobConnect. When you link an external system (a CRM, marketing tool, payment processor, etc.), the privacy practices of that provider apply to the data you send to or receive from them.
2. What we collect
Account information
When you sign up, we collect your name, email address, business name, and authentication credentials. We assign you a BobsWork Reference Number (format BWS-XXXXXXXX) for use in support, billing, and operational correspondence.
Payment information
Payments are processed by Stripe. We receive the last four digits of your card, your billing address, and transaction metadata. We do not store full card numbers on our systems.
Content you provide
This includes prompts, files, documents, and messages you submit to AI Workers, your business memory, your decisions and tasks, your BobLeads campaigns and leads, and any configuration you set inside the product.
Usage and device information
We log basic usage data — pages visited, actions taken, error events, IP address, browser type, and timestamps — to operate, secure, and improve the service.
Cookies
We use first-party cookies and local storage for authentication and product preferences. We do not use third-party advertising cookies.
3. How we use your information
- To deliver the product you signed up for and the features you use.
- To process payments, manage your subscription, and prevent fraud.
- To respond to support requests and operational messages.
- To send product updates and service announcements (you can opt out of marketing at any time).
- To improve reliability, performance, and quality — including aggregated, de-identified analytics.
- To comply with legal obligations and enforce our terms.
4. AI and your content
Your content (prompts, documents, memory, decisions, and worker outputs) is sent to our AI model providers — currently OpenAI — to generate responses. We use commercial-tier agreements that prohibit our providers from using your content to train their models and that limit retention to the time needed to complete the request.
We do not review your private content except: (a) when you explicitly request support that requires it, (b) when required to investigate abuse or a security incident, or (c) when required by law.
5. When we share information
We do not sell your personal information. We share it only with:
- Service providers — Stripe for payments, our cloud database and email providers, our AI model partners under strict contracts.
- Legal and safety — when we believe in good faith that disclosure is necessary to comply with law, protect our users, or prevent harm.
- Corporate transactions — in the event of a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
6. Retention
We retain your account information for as long as your account is active. If you cancel, we delete or anonymize your personal data within 90 days, except where retention is required for legal, tax, or audit purposes. Aggregated, de-identified analytics may be retained indefinitely.
7. Security
We encrypt data in transit (TLS 1.2+) and at rest. Access to production systems is limited to authorized personnel with audit logging. We test our controls regularly and engage third-party auditors for annual security reviews.
No system is perfectly secure. If we discover a breach affecting your personal information, we will notify you without undue delay and as required by applicable law.
8. Your rights
Depending on your jurisdiction, you have rights to access, correct, port, delete, or restrict processing of your personal data. You can exercise most of these directly from your account settings, or by contacting us at privacy@bobswork.com.
California residents have additional rights under the CCPA/CPRA. European residents have additional rights under the GDPR. We honor all applicable rights regardless of where you live.
9. International transfers
BobsWork is operated in the United States. If you use the product from outside the U.S., your information will be transferred to and processed in the U.S. We use standard contractual clauses and equivalent safeguards for cross-border transfers.
10. Children
BobsWork is a business product and is not intended for children under 16. We do not knowingly collect personal information from children.
11. Changes
We may update this policy as the product evolves. Material changes will be announced by email and in-product notification at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the current version.
12. Contact
Privacy questions, data requests, and complaints:
- Email: privacy@bobswork.com
- Mail: BobsWork, Inc., Attn: Privacy, 1 Market Street, San Francisco, CA 94105
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.