Privacy Policy

Who we are

Wyrework is an AI agent rule-encoding platform operated from Lisbon, Portugal. For the purposes of data protection law, Wyrework is the data controller for personal data collected through wyrework.ai and its AI tools.

Contact: privacy@wyrework.ai

What we collect

Email address — when you join our waiting list or write to us. We use it to tell you when the platform opens, or to reply to you.

Assessment responses — when you use any of our AI tools. What you tell us about your workflows is processed to generate your risk assessment and is stored; how long we keep it is in How long we keep your data below.

Technical data — standard server logs (IP address, browser type, pages visited). Used for security, performance monitoring, and understanding how people use the site.

How we use your data

We process your data to provide the services you requested: delivering assessments, telling you when the platform opens, and communicating about the platform. Our lawful basis under GDPR is legitimate interest (Article 6(1)(f)) for service delivery and consent (Article 6(1)(a)) for marketing communications.

We do not sell your data. We do not share it with advertisers. We do not use your inputs to train AI models. Assessment data is processed by our AI system to generate your results.

Third-party processors

We use a limited number of third-party services to operate the platform. Each is bound by data processing agreements:

Who else touches your data. We share personal data with three kinds of provider, each under a data processing agreement: AI model providers, who process what you type to our agents so the agents can answer; cloud hosting and database infrastructure, which stores your data, runs the site and keeps the standard server logs described above; and email delivery, which sends the messages you asked for. We require every AI model provider we use to agree not to train their models on what you send us. We do not control anyone else's systems, so we tell you what we have contracted for, not what happens inside them.

If you want to know which specific companies we use, email privacy@wyrework.ai and we will tell you.

How long we keep your data

We keep your data only as long as we need it for the purpose we collected it for. Email addresses on our waiting list are kept until we have told you the platform is open, or until you ask us to remove yours, whichever comes first. To remove yours, email privacy@wyrework.ai. Server logs are kept for up to 90 days.

How long we keep what you tell us in any of our AI tools depends on whether you have an account or gave us your email. If you have an account, we keep your answers while the account exists. If you have no account but gave us your email for the report, we keep them until you ask us to delete them. In both cases, we delete them when you ask at the privacy address below. If you gave us neither, your answers are not linked to you and are deleted automatically after your visit.

A message you send to support is deleted automatically. Once we have closed it, that happens 90 days later, or 30 days if it was a request about your own data. If it is still open, it is deleted anyway: 120 days after it arrived, or 60 days for a request about your own data. Nothing pauses that timer, including a complaint or a dispute. What is left afterwards is a record that a message came in and how we handled it, without your name, your email address, or what the message said.

Invoices and accounting records are kept for the period required by law.

Your rights

Under GDPR and applicable data protection law, you have the right to access, correct, delete, restrict processing of, and port your personal data. You also have the right to object to processing based on legitimate interest, and to withdraw consent for marketing communications at any time.

To exercise any of these rights, contact privacy@wyrework.ai. We will respond within 30 days.

If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Portuguese data protection authority (CNPD) or your local supervisory authority.

International transfers

Some of our third-party processors operate outside the European Economic Area. Where data is transferred internationally, it is protected by appropriate safeguards including Standard Contractual Clauses (SCCs) or adequacy decisions, as required by GDPR Chapter V. You can ask us for a copy of the clauses we rely on.