Privacy Policy

This Privacy Policy describes how KJI Co, doing business as Workprentice (“Workprentice,” “we,” “us,” or “our”), collects, uses, and shares personal information when you visit our marketing website at https://workprentice.com, use the Workprentice application at https://workprentice.ai, or otherwise engage with our services (collectively, the “Services”).

If you have questions about this policy, contact us at legal@workprentice.com.

Information We Collect

We collect personal information that you provide directly, information collected automatically when you use the Services, and information from third parties you authorize.

Information you provide. When you create an account or use the Services, we collect your name, email address, password, job title (optional), and any other information you choose to provide. If you make a purchase, our payment processor (Stripe) collects your payment details on our behalf; we do not store full payment card numbers.

AI interaction data. When you use the Services, we process the prompts, instructions, and other content you submit to AI agents, along with the outputs those agents generate. This is the working content of the Services and is necessary for them to function.

Information collected automatically. When you visit our website or use the Services, our servers automatically log certain technical information, including IP address, browser type and version, operating system, referring URL, and timestamps. We use this information for security, debugging, and operating the Services. When you use the application, we also record how it performs, such as page loads, request timings, and errors. We tag this with your account, workspace, and organization identifiers so we can diagnose problems. This monitoring runs on AWS, does not use cookies, and is not designed to record the content of your prompts, documents, or conversations. The marketing website separately uses Google Analytics, described under Cookies and Tracking below.

Information from third parties. If you sign in using a third-party identity provider (such as Google), we receive the basic profile information you authorize that provider to share, typically your name and email address.

We do not knowingly collect personal information from children under 18. The Services are not intended for and may not be used by individuals under 18.

How We Use Information

We use personal information to:

• Provide, operate, and maintain the Services
• Authenticate users and manage accounts
• Process payments and manage subscriptions
• Communicate with you about your account, security, and service updates
• Improve and develop the Services
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We process personal information only when we have a valid legal basis to do so: to perform our contract with you, to comply with legal obligations, with your consent where required, or for our legitimate business interests where these are not overridden by your rights.

How We Share Information

We do not sell personal information. We share personal information only with the following categories of recipients:

Service providers (subprocessors). We share information with vendors that help us operate the Services. Each is bound by contract to use the information only on our behalf. The current list, with what each one processes and where, is on our Subprocessors page.

Legal disclosures. We may disclose information when required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a different privacy policy.

AI and Data Use

Workprentice uses third-party AI providers (currently Anthropic and TypeSafe) to power its core features. By default, we do not use your content — including the prompts you submit and the outputs you receive — to train or fine-tune any AI or machine learning model, and we do not allow our AI service providers to do so. Our use of each provider’s API is governed by its commercial terms, which prohibit training on customer data submitted through the API. If we ever offer features that use customer content for model improvement, we will do so only with your consent.

We use usage data, such as which features are used and how long sessions last, to operate and improve the Services. Usage data does not include the content of your interactions. You own all outputs generated by the Services on your behalf.

Data Retention

We retain personal information only as long as necessary to provide the Services and meet legal obligations. Retention depends on the type of data:

• Account data and AI interaction data (including conversation history): retained for the duration of your account and deleted promptly after account termination, except where retention is required for legal compliance, fraud prevention, security investigations, or to enforce our agreements.
• Usage and log data: retained for a limited period for security and service improvement.
• Payment data: handled and retained by Stripe in accordance with their privacy policy.

You may request deletion of your personal information at any time by contacting legal@workprentice.com. When we have no ongoing business need to process your information, we will delete or anonymize it. Information held in encrypted backups is overwritten through normal backup rotation cycles.

Data Location

Workprentice is hosted and operated in the United States. AI features rely on third-party providers (currently Anthropic and TypeSafe), whose own infrastructure may process requests in the United States and other jurisdictions; their handling is governed by their respective privacy policies. We do not currently offer customer-selectable processing regions. If you are located outside the United States, please be aware that data protection laws in the U.S. may differ from those in your jurisdiction.

Cookies and Tracking

The Workprentice marketing website (workprentice.com) uses Google Analytics to measure visits: which pages are viewed, how visitors arrived, their approximate location, and their browser and device. Google Analytics loads, and sets its cookies, only if you accept it in the banner shown on your first visit. Until you accept, and if you decline, the website sends nothing to Google Analytics. When it does load, Google receives your IP address, as with any request your browser makes, and handles what it collects under Google’s Privacy Policy. We ask again six months after your choice, whichever it was, and the cookies expire up to six months after your last visit, or sooner if you decline or clear them. If your browser sends a Global Privacy Control signal, we treat that as declining: Google Analytics does not load and the banner is not shown. You can change your choice at any time with the Cookie preferences control in the website footer, and declining removes any Google Analytics cookies already set. Your choice is remembered in your browser’s local storage.

We do not use Google Analytics for advertising, and the website does not use advertising, cross-site tracking, or behavioral profiling cookies. The Workprentice application does not use Google Analytics. It uses essential session cookies solely to keep you signed in; these are necessary for the application to function and cannot be disabled while logged in.

Your Privacy Rights

Depending on your location, you may have rights regarding your personal information, including:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — ask us to delete your personal information
• Portability — request a copy of your data in a structured, machine-readable format
• Objection — object to certain processing, including for direct marketing
• Withdrawal of consent — where we rely on consent, withdraw it at any time

To exercise any of these rights, contact us at legal@workprentice.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling certain requests.

If you are located in the European Economic Area, United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

California Residents (CCPA/CPRA)

If you are a California resident, you have the rights described above plus the following under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information we collect, use, and share
• Right to delete personal information we have collected from you
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information (we do not sell or share personal information)
• Right to limit the use of sensitive personal information (we do not collect sensitive personal information as defined by the CPRA)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at legal@workprentice.com.

Other US States

Residents of other US states may have additional rights under applicable state privacy laws. We honor verified rights requests from residents of any US state to the extent required by law.

International Data Transfers

Workprentice is operated from the United States and our servers are located in the United States. If you access the Services from outside the United States, your personal information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

If you are located in the European Economic Area, United Kingdom, or Switzerland, your personal information will be transferred to the United States. We rely on appropriate safeguards required by applicable data protection law for these transfers. Contact us at legal@workprentice.com if you would like more information about the safeguards in place.

Security

We use reasonable technical, administrative, and organizational measures to protect personal information against loss, theft, and unauthorized access, disclosure, alteration, and destruction. These include encryption in transit, access controls, and monitoring. However, no security measure is perfect, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this policy reflects the most recent revision. If we make material changes, we will notify you by email or by a prominent notice on the Services before the changes take effect.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, contact us at:

KJI Co, doing business as Workprentice 9 E Loockerman St, Suite 311 Dover, DE 19901 United States

Email: legal@workprentice.com