Regional Privacy Rights

You may ask to access, correct, delete, restrict, object to, or receive a portable copy of eligible personal data, and may withdraw consent where consent is the basis for processing. Rights vary by location and are subject to lawful exceptions.

Send requests or complaints to privacy@wrkzy.com. We verify identity and authority before acting, do not discriminate for exercising a privacy right, and may direct a request about client-controlled customer data to the relevant WRKZY client. An authorized agent must provide evidence of authority where required.

WRKZY does not use current AI assistance to make decisions that produce legal or similarly significant effects without human involvement. WRKZY does not sell client workspace data.

AIRBRILS PRIVATE LIMITEDis the data fiduciary or body corporate for account, website, billing, support, and other data it determines how to use. For client-controlled customer data, WRKZY ordinarily acts on the client's instructions.

Indian users may request access and correction, withdraw consent where applicable, request erasure of eligible data, and use the grievance process. They may also exercise any nomination or complaint rights available when the relevant provisions of Indian law apply.

Privacy and data-rights requests may be sent to privacy@wrkzy.com. Formal grievances may be sent to grievance@wrkzy.com. The designated contact is Sonali Wankhede, Privacy and Grievance Officer.

Where the EU General Data Protection Regulation applies, our legal bases may include performance of a contract or requested steps, legitimate interests in providing and securing a business service, compliance with law, and consent for processing that requires it. You may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, plus the right to complain to your local supervisory authority.

Data may be processed outside the EEA, including in India and locations used by the service providers listed on our Subprocessors page. Where required, the parties use an adequacy decision, approved standard contractual clauses or another lawful transfer mechanism. Transfer documents are available to eligible clients through the Data Processing Addendum process.

WRKZY will publish any EEA representative required for the scope of its launch before regularly offering services to individuals in that territory.

Where the UK GDPR and Data Protection Act 2018 apply, our legal bases and individual rights generally follow the EEA description above. You may also complain to the UK Information Commissioner's Office.

Restricted transfers from the United Kingdom may use the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, an adequacy regulation, or another lawful safeguard.

WRKZY will publish any UK representative required for the scope of its launch before regularly offering services to individuals in the United Kingdom.

Where the Swiss Federal Act on Data Protection applies, you may request information about covered processing, correction of inaccurate personal data, deletion or restriction where available, and may object or withdraw consent where consent is relied on.

Transfers from Switzerland may use an adequacy decision, data-transfer clauses recognized under Swiss law, or another permitted safeguard, including any Swiss modifications needed for the EU Standard Contractual Clauses.

Notice at collection

Depending on the relationship and features used, WRKZY may collect identifiers and contact details; customer-record and professional information; commercial, subscription, and transaction records; internet, device, and usage activity; approximate location derived from IP address; message and workspace content; and inferences or recommendations created for requested customer-operations features. Account credentials are processed for authentication and security.

These categories are used to provide, secure, support, bill, and improve WRKZY; connect client-selected providers; comply with law; and prevent fraud or abuse. Categories, sources, recipient categories, and retention criteria are described in the Privacy Policy. WRKZY does not sell personal data or share it for cross-context behavioral advertising and does not use or disclose sensitive personal information to infer characteristics.

State privacy rights

Residents of states with applicable comprehensive privacy laws may have rights to know or access data, correct it, delete it, obtain a portable copy, and appeal a denied request. Where applicable, they may also opt out of sale, targeted advertising, or qualifying profiling.

If our practices change in a way that creates a sale, sharing, targeted-advertising, or profiling opt-out right, we will provide the required control and honor legally recognized preference signals where applicable.

Where Brazil's LGPD applies, a data subject may request confirmation and access, correction, anonymization, blocking or deletion of eligible data, portability where regulated, information about sharing, review of qualifying automated decisions, and withdrawal of consent. Complaints may be made to Brazil's National Data Protection Authority where the statutory process applies.

International transfers subject to the LGPD must use a mechanism permitted by Brazilian law, which may include an adequacy decision, the ANPD's standard contractual clauses, or another authorized safeguard.

Where Canadian private-sector privacy law applies, you may request access to personal information, an account of its use and disclosure, and correction of inaccurate information. You may withdraw consent subject to legal or contractual restrictions and reasonable notice, and challenge our compliance through the privacy contact above.

Where applicable, individuals may request access and correction and raise a privacy complaint. Australian users can ask for information about likely overseas disclosures; Singapore users may withdraw consent with reasonable notice and contact the organization's data-protection function.

Because WRKZY is operated from India and uses international service providers, personal data may be disclosed or made accessible overseas. Current provider categories and known processing locations are maintained on the Subprocessors page. We take contractual and technical measures required for covered cross-border disclosures.

Privacy, communications, consumer, employment, sector, and data-localization laws differ by location. Where another law applies to WRKZY processing, WRKZY will honor the rights and restrictions that cannot lawfully be excluded, even if they are not listed on this page. A client remains responsible for the local laws governing the customer data and communications it controls.

Contact privacy@wrkzy.com to request a location-specific assessment before using WRKZY for regulated data, high-risk processing, employee monitoring, or a jurisdiction with localization or registration requirements.