Privacy Policy

1. Who we are

WorkSpotHQ (“we”, “our”, “us”) is a document and image tools platform owned and operated from the United States by Nuronics Corp., a company incorporated in Delaware, United States. This policy explains how we handle personal information when you use our website and services.

2. Information we collect

Depending on how you use WorkSpotHQ, we may process:

• Account information — If you create an account or sign in (for example via magic link), we process the email address and name you provide or that your identity provider supplies, plus account settings you choose.
• Files you upload — PDFs, images, Word documents, and other files you submit for processing, plus outputs generated when you run a tool.
• Usage and technical data — Such as which tools you use, approximate usage counts or plan limits, errors, product analytics events, browser type, general device or network information, and IP address in server logs, for operations, security, and abuse prevention.
• Payment-related information — Billing status, plan type, and transaction references. Payment card details are handled by Stripe on behalf of Nuronics Corp.; we do not store full card numbers on our servers.
• Support and feedback — Content you send when you contact us or submit bug reports.
• Cookies and similar technologies — As described in Section 10.

We do not store your full payment card details. Payment information is processed securely by our payment processor (such as Stripe), which is certified to industry standards such as PCI-DSS.

3. How we use information

• Provide the tools — To run conversions, edits, merges, and other processing you request on our servers.
• Accounts and billing — To authenticate you, enforce plan limits, process subscriptions through Stripe, and show plan status in the product.
• Improvements and reliability — To understand aggregate usage, fix bugs, and develop features.
• Communication — Service messages (for example magic links and security notices). Optional marketing only if you opt in, where offered.
• Security and legal — To protect users, enforce our Terms of Service, and comply with law where required.

4. File processing and storage

When you use a tool, your files are transmitted to and processed on our servers — not only in your browser. Uploads and generated outputs are stored temporarily to complete processing, allow download, and perform routine maintenance such as cleanup jobs.

We delete or overwrite temporary tool files within a reasonable period after processing completes or after outputs are no longer needed for download, consistent with our operational cleanup practices. We do not guarantee that any file will remain available for recovery after that period. You should keep your own copies of important files and results.

We do not use your uploaded files to train public AI models, and we do not sell file contents.

Workflow continuity

Files may be temporarily retained during your session to support workflow features — for example, using multiple tools in sequence without re-uploading the same file, or carrying a result from one step to the next. Such files are:

• stored using reasonable safeguards appropriate to our architecture;
• used only for processing, download, and workflow continuity within the service; and
• deleted or overwritten after processing completes, when no longer needed for download or handoff, or within a limited time window consistent with our cleanup practices.

This temporary retention does not constitute long-term storage, file hosting, or a backup service. We do not guarantee how long any file remains available during or after a workflow.

5. User responsibility

You should not upload highly sensitive, confidential, or regulated information unless you have decided the risk is acceptable and you have authority to do so. You are responsible for ensuring your use of WorkSpotHQ is lawful, that you have rights to the content you upload, and that you comply with any obligations you owe to third parties (for example employers, clients, or data subjects).

Our Terms of Service describe acceptable use and file-handling limitations that apply alongside this policy.

6. We do not sell personal data

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising in exchange for money, as “sale” is defined under laws such as the California Consumer Privacy Act (CCPA/CPRA), except as permitted for service providers processing data on our instructions.

7. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect your information, including access controls and encrypted transmission where appropriate for our architecture.

However, no system can be guaranteed to be completely secure, and we cannot ensure or warrant the absolute security of your data.

8. Account, terms acknowledgment, and marketing

When you use a WorkSpotHQ account, we may ask you to confirm that you agree to our Terms of Service and this Privacy Policy before certain features are available. We record the time of that acknowledgment where required to demonstrate consent.

Marketing. Product updates and optional marketing messages are separate from account essentials. If you opt in or out, we record your choice and when it was set. You can update marketing preferences in account settings where available.

9. Legal basis (GDPR)

If the GDPR applies, we rely on one or more of the following:

• Consent — For example, optional marketing or non-essential cookies/analytics where we ask for consent.
• Contractual necessity — To provide the service and account features you request.
• Legitimate interests — Such as securing the platform, improving the product, understanding aggregate usage, and preventing abuse — balanced against your rights.

10. Cookies and analytics

We use cookies and similar technologies for essential site operation, preferences where applicable, and — with your consent where required — analytics. Product analytics (for example via PostHog) help us understand usage in aggregate. We configure analytics to respect your cookie choices where our implementation allows.

We may work with advertising partners where we offer advertising; those partners may use cookies or device data under their own policies. You can control cookies through your browser and through our cookie notice where offered.

11. Third-party services

We use third-party service providers to operate and improve the Service, including infrastructure hosting (e.g., Vercel), database and authentication services (e.g., Supabase), analytics (e.g., PostHog), email delivery (e.g., Resend), and payment processing (e.g., Stripe).

These providers may process your information on our behalf in accordance with their own privacy and security practices. They process data under their privacy policies and our agreements with them, only for the purposes we authorize.

12. International users and data transfers

WorkSpotHQ is operated from the United States and is used by people in many countries. We and our service providers may process and store information in the United States and other countries where we or our providers operate.

Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your information to jurisdictions that may have different data protection laws than your country of residence.

Where required by law (for example, transfers from the EEA, UK, or Switzerland), we use appropriate safeguards such as standard contractual clauses.

13. Retention

Account data is kept while your account exists and for a limited period afterward for security, fraud prevention, billing, and legal compliance, as described in Section 14.

Temporary tool files are retained only as long as needed for processing and download, then removed or overwritten according to our cleanup practices (see Section 4).

Logs and analytics may be retained for a limited operational period. Aggregated or anonymized data that cannot reasonably identify you may be kept longer for statistics and security.

14. Your rights (GDPR and similar laws)

Depending on where you live, you may have the right to:

• Access — Request a copy of personal data we hold about you.
• Correction — Ask us to fix inaccurate or incomplete data.
• Deletion — Ask us to delete personal data, subject to legal exceptions.
• Objection or restriction — Object to certain processing or ask us to limit it.
• Portability — Receive your data in a structured, common format where applicable.
• Withdraw consent — Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise these rights, contact us using the details in Section 18. You may lodge a complaint with your local data protection authority.

15. California privacy rights (CCPA / CPRA)

California residents may have rights to know, delete, and correct personal information, and to opt out of certain sharing. As stated above, we do not sell personal information as defined by the CCPA. We will not discriminate against you for exercising applicable rights. To submit a request, use the contact information below; we may verify your identity before responding.

16. Children

WorkSpotHQ is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, contact us and we will take steps to delete it.

17. Account deletion

When you delete your account where offered:

• Your account is deactivated and you lose access.
• We may retain certain personal data for up to 30 days (or as needed for billing and legal obligations) for abuse prevention, recovery where offered, and compliance.

After that period, personal data is deleted or anonymized except where we must retain information by law. We may retain anonymized logs that cannot reasonably identify you for security and operations.

18. Updates to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date. For material changes, we may provide additional notice. Continued use after changes take effect means you accept the updated policy, except where applicable law requires otherwise.

19. Contact us

Questions about this policy or your data? Contact Nuronics Corp. via the contact options on nuronics.com. You can also review our Terms of Service.