นโยบายความเป็นส่วนตัว

Introduction

Workstation AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://workstation.ai and use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

1. Information We Collect

2. How We Use Your Information

We use the information we collect for the following purposes:

• **Provide Services**: To deliver, maintain, and improve our products and services
• **Account Management**: To create and manage your account, authenticate users, and provide customer support
• **Communications**: To send you service updates, technical notices, security alerts, and administrative messages
• **Marketing**: To send promotional materials, newsletters, and information about products and services (with your consent)
• **Personalization**: To customize your experience and provide personalized content and recommendations
• **Analytics**: To analyze usage patterns, monitor trends, and improve our website and services
• **Security**: To detect, prevent, and address fraud, security issues, and technical problems
• **Legal Compliance**: To comply with legal obligations, enforce our terms, and protect our rights
• **Research and Development**: To develop new products, features, and services
• **Business Operations**: To conduct business planning, reporting, and operational management

3. How We Share Your Information

We may share your information in the following circumstances:

4. Data Security

We implement industry-standard security measures to protect your personal information:

• **Encryption**: Data in transit is encrypted using TLS/SSL protocols; data at rest is encrypted using AES-256
• **Access Controls**: Role-based access controls and multi-factor authentication for system access
• **Security Monitoring**: 24/7 monitoring for security threats and anomalous activities
• **Regular Audits**: Periodic security assessments and penetration testing
• **Compliance Certifications**: ISO 27001 and SOC 2 Type II certified
• **Incident Response**: Documented procedures for data breach notification and response
• **Employee Training**: Regular security awareness training for all staff
• **Secure Development**: Security-by-design principles in software development

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• **Account Data**: Retained for the duration of your account plus 90 days after closure
• **Business Data**: Retained per your service agreement, typically 7 years for financial records
• **Marketing Data**: Retained until you unsubscribe or withdraw consent
• **Analytics Data**: Anonymized data may be retained indefinitely for statistical purposes
• **Legal Obligations**: Some data may be retained longer to comply with legal, tax, or regulatory requirements

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• **Legal Basis**: We process your data based on consent, contract performance, legitimate interests, or legal obligations
• **Data Protection Officer**: You can contact our DPO at dpo@workstation.co.uk
• **International Transfers**: We use Standard Contractual Clauses approved by the European Commission for data transfers
• **Right to Lodge Complaint**: You can file a complaint with your local data protection authority
• **Automated Decision Making**: We do not use solely automated decision-making with legal effects

8. CCPA Compliance (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• **Right to Know**: Request disclosure of personal information collected, used, and shared
• **Right to Delete**: Request deletion of your personal information
• **Right to Opt-Out**: Opt-out of the sale of your personal information (we do not sell personal information)
• **Right to Non-Discrimination**: We will not discriminate against you for exercising your rights
• **Authorized Agent**: You may designate an authorized agent to make requests on your behalf

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction.

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Privacy Shield Framework (where applicable)
• Binding Corporate Rules (BCRs)
• Explicit consent for transfers where required
• Adequacy decisions by relevant authorities

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our systems.

11. Third-Party Websites and Services

Our website may contain links to third-party websites, applications, and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our website
• Requiring acceptance for continued use of services (for material changes)