Workledge

Privacy Policy

Reference translation — the Japanese text governs. Version: 2026-08-v3

1. Operator Workledge (the "Service") is provided by its operator (the "Operator"). The Operator's name and address are disclosed without delay upon legally grounded requests. Contact details are in the Contact section at the end of this policy.

2. Information we collect 1. Account information: email address, display name, identifiers from authentication providers (email / Google). 2. User data: knowledge and data that users register or generate on the Service. 3. Usage logs: operation trails (when and which tools were called, etc.) and usage volume, collected for troubleshooting, abuse prevention and improvement.

3. Purposes of use Collected information is used to (1) provide, maintain and improve the Service, (2) handle failures, ensure security and prevent abuse, (3) respond to inquiries, (4) comply with laws, and (5) send notices and announcements about the Service (including information about paid plans; we do not send third-party advertising) and invite you to surveys or interviews for improvement. We do not use user data or usage logs to train general-purpose models, or machine-learning models used to serve other users (processing to serve that user is not restricted by this sentence). You may opt out of (5) at any time.

4. Third parties and processors (including those located abroad) 1. We do not provide personal data to third parties without consent, except as required by law. 2. We entrust processing, to the extent necessary to provide the Service, to the following providers (all essential to the operation of the Service): - Authentication, database, storage: Supabase (a U.S. company; the database is in the Tokyo, Japan region) - Application hosting: Google Cloud (a U.S. company; Tokyo region) - Email delivery: Resend (a U.S. company) 3. As above, our processors include companies based in the United States. Having reviewed the personal-data protection regime of the United States, we take necessary and appropriate safeguards through contracts with each processor and their published security measures. 4. Data is passed to AI clients connected by the user (ChatGPT, Claude, etc.) based on the user's own authorization (OAuth), within the user's permissions. Handling of data by those AI client providers is governed by their own terms and privacy policies.

5. Storage location and retention 1. User data is stored primarily in the Tokyo, Japan region. Some administrative functions of processors may be handled outside Japan, including in the United States. 2. Retention: account information, user data and usage logs are retained while the account exists. Upon a closure request, we delete user data within 30 days. Removal from backups (daily, 14 generations) may take up to 14 additional days.

6. External transmission (disclosure under the Telecommunications Business Act of Japan) Our website and portal cause the following transmissions from users' devices:

7. Security measures We implement tenant isolation (per-user data separation), access control, encrypted transport, and operation-trail logging.

8. Access, correction, deletion, export 1. Users may request disclosure, correction, deletion or suspension of use of their information by contacting contact@workledge.ai. 2. Users may request export (return) of their user data for 30 days after account closure. Upon a closure request, we delete user data within 30 days.

9. Changes This policy may be revised. Material changes will be announced on the Service.

10. Contact contact@workledge.ai

Enacted: 2026-07-15 (v1) / Revised: 2026-08-02 (v2) · Workledge (contact@workledge.ai)