Privacy Policy

This Privacy Policy explains how AMA Invest Capital Limited (Registration No.: 77221253, Registered Address: Unit 1603, 16th Floor, The L Plaza, 367-375 Queen's Road Central, Sheung Wan, Hong Kong, Email: support@workeron.ai) ("Workeron.ai", "Company", "we", "us", "our") collects, uses, stores, shares and otherwise processes personal data in connection with Workeron.ai, including the website, hosted platform, user accounts, subscriptions, AI environments, integrations, communications and related services (collectively, "Workeron.ai").

By using Workeron.ai, you acknowledge this Privacy Policy.

1. Who We Are

Workeron.ai is operated by AMA Invest Capital Limited, Registration No.: 77221253, Registered Address: Unit 1603, 16th Floor, The L Plaza, 367-375 Queen's Road Central, Sheung Wan, Hong Kong, Email: support@workeron.ai.

2. Scope

This Privacy Policy applies to personal data collected through Workeron.ai when you visit the website, register an account, purchase a subscription, top up balance, communicate with us, connect integrations, deploy or use AI agents, interact with connected channels, or otherwise use Workeron.ai. It does not apply to third-party websites, services or platforms that are not controlled by AMA Invest Capital Limited.

3. Personal Data We Collect

We may collect:

• Identity Data: Name, email address, company name, account details, and contact details such as Instagram, Telegram, WhatsApp or phone number.
• Billing Data: Subscription plan, token or balance purchases, payment status, invoice references, billing country, tax information and limited payment metadata.
• Technical Data: IP address, browser type, device identifiers, operating system, timestamps, log data, diagnostic information and approximate location inferred from IP.
• Usage Data: Pages viewed, clicks, actions taken, session behavior, feature usage, referral sources, interaction history and product analytics.
• Support Data: Inquiries, messages, feedback and correspondence.
• AI & Workflow Data: Prompts, instructions, inputs, outputs, files, agent logs, execution records, message logs from connected channels, configurations, integration metadata and related content.
• Cookie Data: Authentication, security, analytics, preferences, and marketing data.

4. Sources of Information

We collect personal data directly from you, automatically from your browser, device or session, from payment processors, analytics providers, infrastructure providers, service providers, advertising and marketing partners, and from third-party integrations or communication channels that you connect or authorize.

5. Systems, Providers and Processors

To provide Workeron.ai, we may use and rely on third-party processors, subprocessors, partners and systems, including:

• AI Providers: OpenAI, Anthropic, Google, Meta, Mistral
• Payment Providers: Airwallex, Stripe, PayPal
• Analytics: PostHog
• Advertising & Marketing: Meta, Google (audience building, retargeting, lookalike campaigns)
• Cloud & Infrastructure: Hetzner
• Database & Backend: Supabase, PostgreSQL
• Identity & Authentication: Supabase Auth, Clerk
• Communication Channels: Telegram, WhatsApp, Slack, Email

The specific providers may change from time to time.

6. How We Use Personal Data

We use personal data to:

• Operate, provide, maintain, secure and improve Workeron.ai
• Create and manage user accounts
• Authenticate users
• Process subscriptions, purchases and payments
• Provision compute, hosting and AI resources
• Deploy and manage AI agents
• Enable integrations and connected channels
• Provide support
• Investigate abuse, fraud and security incidents
• Enforce our Terms of Use
• Communicate regarding operational, billing and support matters
• Send marketing communications (where permitted by law)

7. Legal Bases

Where applicable law requires a legal basis for processing, we rely on one or more of the following: performance of a contract, legitimate interests, compliance with legal obligations, consent where required, and other lawful grounds recognized under applicable data protection law. Where consent is required for cookies, tracking, marketing or particular data uses, we will rely on consent to the extent required by law.

8. Payments

Payments for Workeron.ai may be processed by third-party payment providers, including Airwallex, Stripe and PayPal. AMA Invest Capital Limited does not necessarily store full payment card details or private wallet keys on its own servers. We may receive limited transaction-related information such as payment status, payment method type, billing country, invoice data, transaction identifiers and fraud prevention signals.

9. Analytics, Cookies and Tracking

Workeron.ai may use cookies, local storage, pixels, scripts, SDKs and similar technologies to enable authentication, remember preferences, maintain sessions, understand usage, improve performance, conduct product analytics, measure campaigns, detect fraud and enhance security. We may use tools such as PostHog and may use marketing and analytics technologies associated with Google and Meta where applicable. You may control cookies through your browser settings, but disabling certain technologies may affect functionality.

9.1 Customer-Controlled Environments and Unauthorized Modifications

Where Workeron.ai deploys, configures, or operates an AI agent within a virtual machine, server, container, device, cloud account, repository, workspace, or other technical environment controlled by or accessible to the Customer, the Customer acknowledges that such environment may contain sensitive configurations, credentials, automations, cron jobs, scheduled tasks, triage workflows, logs, files, integrations, and production systems.

The AI agent is designed to operate only within the approved capability map, autonomy rules, permissions, and safety boundaries configured for the Customer. The agent may refuse to perform actions that are outside scope, unsafe, legally prohibited, technically restricted, unsupported, or not authorized. For restricted actions, the agent may require prior written approval through the designated approval channel before proceeding.

The Customer must not modify, delete, bypass, disable, rewrite, or interfere with the agent's system files, schedules, cron jobs, triage workflows, approval flows, logs, security controls, credentials, permissions, repositories, dependencies, memory, prompts, configuration, or connected integrations unless expressly approved by Workeron.ai in writing.

Workeron.ai is not responsible for any malfunction, downtime, data loss, broken automation, failed integration, degraded performance, security incident, unauthorized access, incorrect output, or other issue caused by actions, omissions, modifications, instructions, access, or configuration changes made by the Customer or any person with access to the Customer-controlled environment.

Any unauthorized modification may void included support, refund eligibility, service guarantees, and any obligation by Workeron.ai to repair, replace, rebuild, troubleshoot, or continue operating the agent.

10. Data Sharing

We may share personal data with service providers, subprocessors, infrastructure providers, cloud hosting providers, database providers, AI model providers, payment processors, analytics providers, communication providers, identity and authentication providers, customer support tools, integration partners, marketing or advertising partners, and professional advisors, but only as reasonably necessary for the operation, security, support, billing, improvement and lawful administration of Workeron.ai.

We may also disclose personal data where required by law, legal process, regulatory request, court order, or where necessary to enforce rights, prevent fraud, protect users, investigate abuse, respond to security incidents, or in connection with a merger, acquisition, restructuring, financing, asset transfer or similar corporate transaction. We do not sell personal data for money.

11. AI and Connected Channel Data

Workeron.ai may process prompts, instructions, agent responses, uploaded files, workflow data and message logs from connected channels such as Telegram, WhatsApp, Slack or email as necessary to provide the service. Such data may be transmitted to third-party AI providers or technical subprocessors to generate outputs, execute workflows, run automations, host environments, maintain logs, provide support or improve service quality.

Your use of third-party integrations through Workeron.ai may also involve separate processing under those third parties' own terms and privacy notices.

12. Infrastructure and Security

We implement reasonable technical, organizational and administrative measures designed to protect personal data:

• Isolated Docker containers or comparable isolated environments for client instances
• TLS 1.3 encryption for data in transit
• AES-256 or comparable encryption standards for data at rest
• Authorization through JWT, session management, Supabase Auth, Clerk or equivalent

However, no website, software, transmission method, cloud environment or digital system is completely secure, and therefore we cannot guarantee absolute security.

13. International Transfers

Workeron.ai operates internationally and may process or transfer personal data across multiple jurisdictions. Where required by applicable law, we implement appropriate transfer safeguards.

14. Data Retention

We retain personal data for as long as reasonably necessary to provide Workeron.ai, comply with legal obligations, resolve disputes, enforce our agreements, prevent fraud, maintain backups, and protect our legal and business interests.

15. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal data
• Correct or update your data
• Delete or restrict processing
• Object to processing
• Port or export your data
• Withdraw consent where applicable

To submit a request, contact us at support@workeron.ai.

16. Marketing Communications

We may send you service-related communications. Where permitted by law, we may also send marketing or promotional communications related to Workeron.ai. You may opt out of marketing messages at any time.

17. Children's Privacy

Workeron.ai is not intended for children under 18 and we do not knowingly collect personal data from children.

18. Third-Party Links and Services

We are not responsible for the privacy, security or data handling practices of third parties and you should review their policies independently.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version becomes effective upon posting. Your continued use of Workeron.ai after that date constitutes acknowledgment of the updated Privacy Policy.

For related contractual terms, please also review our Terms of Use.

20. Contact

For any questions, concerns or privacy requests regarding Workeron.ai, please contact:

AMA Invest Capital Limited
Registration No.: 77221253
Unit 1603, 16th Floor, The L Plaza
367-375 Queen's Road Central
Sheung Wan, Hong Kong
Email: support@workeron.ai