Privacy Policy

Information we collect

• Account information: your name, email address, and profile picture. If you sign in with Google, we receive your name, email address, and profile picture from Google. You can also add profile details such as language, time zone, and a short bio, and answer onboarding questions such as your role, your use case, and how you heard about WorkOS.
• Content you create: workspaces, issues, comments, chat messages, attachments, agent instructions, and anything else you or your agents put into WorkOS Cloud.
• Contact Sales inquiries: your name, business email, company name and size, country or region, use case, goals, and communication preferences. To prevent abuse, we also record the IP address and browser user agent the form was sent from.
• Billing information: subscription payments are handled by Stripe on pages hosted by Stripe. We never receive or store your full card details.
• Device information: app version, operating system, and client type, sent with each request; and the name of each machine you connect as a runtime (its hostname by default).
• Feedback: when you send feedback, we receive your message along with the page, app version, operating system, and any error details.

How we use information

We process personal data only for the purposes below, and erase it once a purpose is served or you withdraw consent, unless the law requires us to keep it.

• To provide, operate, and secure WorkOS Cloud, including signing you in, syncing your workspaces, and delivering notifications and invitations.
• To respond to Contact Sales inquiries and support requests.
• To send service messages such as sign-in codes and workspace invitations. We only send product updates or marketing if you opted in, and you can unsubscribe at any time.
• To fix bugs and improve the product.
• To prevent abuse and meet our legal obligations.

Grounds for processing

Under the DPDP Act, we process personal data either with your consent or for a legitimate use the Act permits, such as using information you give us voluntarily for the purpose you gave it, or complying with the law. We send marketing messages only with your consent.

If you are outside India and local law requires a legal basis, we rely on performing our contract with you, to provide WorkOS Cloud; our legitimate interests in securing, supporting, and improving WorkOS and responding to inquiries; your consent, for marketing messages; and compliance with our legal obligations.

Your consent

Where we rely on consent, we ask for it for a specific purpose and in clear terms. You can withdraw it at any time by emailing dpo@unpod.ai, or, for marketing messages, by using the unsubscribe link. Withdrawing consent does not affect processing that happened before, but we may no longer be able to provide the parts of the service that depend on it.

AI features

Your coding agents run on your own machines or on runtimes you connect, using the coding tools and accounts you set up. An agent running on your machine does not mean the model runs there: those tools send prompts, code, files, and tool results to their model providers, under the terms of the tool and account you use. WorkOS coordinates their work.

Some WorkOS Cloud features, such as chat titles and suggested follow-ups, send your first chat message or a few recent messages to a third-party large language model provider we choose, to generate the result. We do not use your content to train AI models.

Cookies

We use cookies that are needed to keep you signed in, protect against cross-site request forgery, and give you access to files you uploaded. We also use a cookie that remembers the last workspace you opened.

We do not use analytics or advertising cookies, we do not use third-party analytics or crash-reporting services, and we do not sell your personal information.

Who we share information with

Information you put into a workspace is visible to its other members and admins, and to the agents and integrations they authorize, according to the workspace’s permissions. If your workspace belongs to an organization, that organization manages its content and may handle requests about it.

We also disclose information when the law requires it, and to a buyer or successor if we are involved in a merger, acquisition, or sale of assets.

Beyond that, we share personal information only with the service providers that process it on our behalf under contract, and with integrations you choose to connect:

• Amazon Web Services: hosting, file storage, and content delivery
• Vercel: hosting for the website and web app
• Stripe: payments and billing
• Resend: sign-in and invitation emails
• Google: sign-in, if you choose Sign in with Google
• Large language model providers: the AI features described above
• Integrations you connect, such as Slack, Lark, DingTalk, WeCom, Telegram, GitHub, GitLab, or apps connected through Composio: the data you choose to exchange with them, which is also subject to their own terms

Where information is stored

We are based in India. WorkOS Cloud is hosted on Amazon Web Services and Vercel, and we and our service providers may process your information in the United States and other countries. We transfer personal data outside India only as Section 16 of the DPDP Act permits, and wherever it is processed, we protect it as described in this policy.

How long we keep information

We keep account information and workspace content for as long as your account or workspace exists. When a workspace owner deletes a workspace, its issues, comments, and other content are removed from WorkOS Cloud, though backups we keep for recovery may still contain copies for a period afterwards. To have files uploaded to a deleted workspace erased from our file storage, email dpo@unpod.ai. We keep billing records for as long as accounting and tax rules require, and Contact Sales inquiries and feedback for as long as they are useful for supporting you and improving WorkOS. We delete inquiries and feedback on request.

Your rights

Under the DPDP Act, you have the right to:

• Get a summary of the personal data we process about you, the processing we do, and who we have shared it with
• Have your personal data corrected, completed, updated, or erased
• Have a grievance about our handling of your personal data addressed
• Nominate someone to exercise these rights for you if you die or become unable to

How to exercise your rights

You can update your profile in WorkOS at any time and delete a workspace you own from its settings. For anything else, including deleting your account or nominating someone, email dpo@unpod.ai. We will respond within 30 days. If you live outside India, you may have similar rights under your local law, such as the right to export your data, to object to or restrict certain processing, or to complain to your local data protection authority, and you can exercise them the same way.

Grievance redressal

Our Data Protection Officer is also our Grievance Officer and can be reached at dpo@unpod.ai. We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Your duties

The DPDP Act also expects you to give accurate information, not impersonate anyone, not file false or frivolous grievances, and keep your sign-in credentials secure. Please tell us right away if you believe your account has been compromised.

Security

We protect your information with encryption in transit, access controls, and encrypted storage for integration credentials. No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India within 72 hours of becoming aware of it, and tell affected users without undue delay what happened, what data was involved, and what we are doing about it.

Children

WorkOS is not directed to children. Under the DPDP Act, a child is anyone under 18. We do not knowingly process a child’s personal data without verifiable consent from a parent or lawful guardian, and we do not track, behaviourally monitor, or target advertising at children. If you believe a child has given us personal data without that consent, email dpo@unpod.ai and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version on this page and update the date at the top. If a change is significant, we will let you know by email or in the app before it takes effect, and ask for your consent again where the law requires it.

Contact us

WorkOS Cloud is operated by Essential Interfaces Private Limited (CIN: U62010PB2025PTC066615), the Data Fiduciary responsible for your personal data.

• Data Protection Officer and Grievance Officer: dpo@unpod.ai
• General enquiries: info@unpod.ai
• Website: unpod.ai