Privacy Policy

Who we are

WorkProduct, Inc. ("WorkProduct," "we," "us," or "our") operates WorkProduct.ai, an AI-powered platform for analyzing insurance policies. Our registered address is in the United States. For questions about this policy, contact us at dale@workproduct.ai.

What we collect

We collect only what is necessary to provide the service:

• Account information — name, work email address, firm name, and role when you apply for or create an account.
• Documents you upload — insurance policy PDFs, endorsements, and any other files you submit for processing. These are processed solely to produce your output and are not stored longer than necessary.
• Usage data — pages visited, features used, and actions taken within the platform. We use this to improve the product.
• Communication records — emails or messages you send us.

We do not collect payment card information directly. Payments are processed by Stripe, which has its own privacy policy.

How we use your information

• To provide, operate, and improve the Policy Compiler and related services.
• To communicate with you about your account, support requests, and service updates.
• To fulfill legal obligations and enforce our Terms of Service.

We never use your documents or outputs to train AI models — not for fine-tuning, not for evaluation, not for any purpose. Your policy documents are processed to produce your output and are not used for anything else.

Data storage and security

Your data is stored on Microsoft Azure infrastructure. Each customer's data is held in an isolated tenant — no data is commingled across organizations. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

Bermuda Form policy data is processed exclusively on UK-provisioned Azure infrastructure. No Bermuda Form data touches US-based servers, storage, or model inference.

Data retention

We retain your account information for as long as your account is active or as needed to provide the service. Uploaded documents and generated outputs are retained for the duration of your subscription plus a 30-day grace period, after which they are permanently deleted. You may request deletion at any time.

Third-party services

We use a limited set of sub-processors to deliver the service. We maintain a current list in our Data Processing Agreement. We do not sell your data to any third party.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict how we process it. To exercise any of these rights, email dale@workproduct.ai. We will respond within 30 days.

Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date above and, for material changes, notify you by email.