Service privacy policy

This policy explains how Obra Inc (“Wrkr,” “we” or “us”) collects, uses and shares personal information when you use Wrkr in a web browser, in the Wrkr apps for Android, iPhone, iPad and Mac, and in the Wrkr shop. The website privacy notice covers the public website.

If you use Wrkr to process other people’s personal information for your business, you are responsible for that information, and a separate data-processing agreement covers our processing of it for you.

• Account information: your name, email address, password or passkeys, account identifiers, and the time zone and languages of the device you sign in on. Your address in Wrkr is based on your name; you can change it.
• Payment information: your subscription, payment status and receipts. Stripe collects your card or UPI details; we do not.
• Your content: your requests, chats, the files and photos you add, and what your worker makes.
• Sign-ins to services you connect: your sign-in to your AI and to the websites your worker uses for you, kept on your worker’s computer.
• Shared apps: the data of apps you share from Wrkr.
• Backups: encrypted copies of your work, kept off your worker’s computer.
• Logs: records of access, errors, resource use and security events.
• Talk time: how many seconds you talk on Wrkr’s own voice each month.
• App information: your device’s notification address, if you use a Wrkr app.
• Communications: messages you send to support, including AI replies you report with Report to Wrkr.

You give us most of this information directly. The rest comes from your use of Wrkr, the services you connect and Stripe.

We use your information to:

• provide Wrkr: sign you in, run your worker, do the work you ask for and keep your work;
• process payments, renewals and refunds, and keep financial records;
• send you notifications and service messages;
• provide support and review reports;
• keep Wrkr secure, prevent fraud and abuse, and fix problems;
• comply with the law.

We do not sell your personal information, use it for advertising or use your content to train AI models.

Wrkr works with the AI service you choose, such as ChatGPT (OpenAI), Claude (Anthropic) or Grok (xAI), on your own account with that company. When you use your worker, your requests and the content your worker needs to complete them are sent to that company and handled under its terms and privacy policy. Nothing is sent to your AI service until you connect it, and you can disconnect it at any time in Your AI. Other services you connect receive what your worker sends them in the same way.

You can talk to your worker out loud in any chat. Requests you make by voice are saved in the chat as text; the rest of the talk is not saved. In the Android, iPhone and iPad apps, a talk continues as a call while the screen is locked.

If ChatGPT is connected to your worker, a talk uses ChatGPT’s voice on your own ChatGPT plan. The sound goes directly between your device and OpenAI under your ChatGPT account. It does not pass through our servers, and we do not record it.

Otherwise, or once your ChatGPT plan’s voice is used up, a talk uses Wrkr’s own voice, which OpenAI provides to us. The sound goes directly between your device and OpenAI, and we do not record it. The words of the talk pass through our servers to your worker’s computer, so your requests reach the chat. OpenAI receives what is said in the talk, the chat’s name and the name your worker calls you, with a code that stands for your account; we never give it your email address.

The apps store your session, drafts, a copy of your chats and files being transferred on your device. Signing out ends your session and stops notifications to that device; deleting the app removes the rest. The apps use your camera or microphone only when you choose to. They contain no advertising, analytics or crash reporting, and do not collect your location or advertising identifier.

Notifications are delivered by Google on Android and by Apple on iPhone, iPad and Mac. A notification contains your device’s notification address, internal identifiers, your worker’s name and whether it finished or needs you. It never contains your chats or files.

When you report an AI reply with Report to Wrkr, we receive that reply and any comments you add, and handle them as a support request.

When you request a link in the shop, we collect your email address, your country and the time of your request. We use them to send your link, or one email when a place becomes available, and to understand demand by country. If Wrkr is not sold in your country, we do not email you.

To limit repeat emails, we keep a one-way hash of your email address and the time of each email we send: one per request, and at most one more if no place was available. When we issue your link, we create a Stripe customer record using only your email address; no payment details exist until you sign up at Stripe’s checkout.

Hetzner sends these emails and stores the records on our servers in the European Union, with encrypted backups at Backblaze in the European Union. We keep them until you buy, when they become part of your account, or until you ask support@wrkr.dev to delete them; we then delete your address, its links, its unpaid checkouts and its Stripe customer record.

We share personal information only with the service providers below, with the AI and other services you connect, or when the law requires it.

These providers protect your information to the same standard as this policy. Some of them, and our support team, operate outside Europe; where the law requires safeguards for these transfers, we put them in place.

We use only the cookies needed to run Wrkr, such as those that keep you signed in. We do not use cookies for tracking or advertising.

You can delete your account on your account page (Leave Wrkr) or by emailing support@wrkr.dev.

We keep your content while your service is active and for seven days after it ends, so you can export it; if you request an export in time, we keep what it needs until the export is ready and for seven days after. We then delete your content, including the sign-ins stored on your worker’s computer, and delete its backups within 30 days, unless the law requires us to keep it. To end your worker’s access to a connected service sooner, end its session in that service’s settings.

Logs, which may include file names and sizes, are deleted within 30 days. Support and basic account records, which exclude your content and sign-ins, are kept for up to 12 months after the request or after your account closes, unless needed for an open issue or by law. Financial and tax records are kept for the period the law requires. Information kept for legal reasons is used for no other purpose.

For immediate deletion, email support@wrkr.dev; we will verify your identity, confirm what will be deleted and explain any legal exceptions.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to restrict or object to our use of it, and to withdraw consent. To use these rights, email support@wrkr.dev. We verify requests without asking for your password or sign-in codes, and respond within the time the law requires. You may also complain to your data-protection authority, and you can ask for a person to review any automated decision about your account.

Where the law requires a legal basis, we rely on our contract with you, our legal obligations, our legitimate interest in providing a secure, supported and fraud-free service, and your consent where required.

We use encrypted connections, access controls and encrypted backups, and store passwords only as one-way hashes. Our systems run, back up, move and restore your worker’s computer automatically, without anyone opening it. Our staff access your computer, files or chats only when you ask for help and agree, when needed to prevent harm to the service or to others, or when the law requires it. If a personal-data breach must be reported, we notify you and the authorities as the law requires.

Wrkr is for adults 18 and over and is not directed to children.

We post changes to this policy on this page, and notify you before we use your information in a significant new way.

For questions or requests about your privacy, email support@wrkr.dev or write to Obra Inc, 30 N Gould St 66299, Sheridan, WY 82801, United States.