Privacy Policy

WRKS Studio (“WRKS,” “we,” “us”) is an AI product that helps founders and small businesses draft websites, copy, and creatives. This policy describes what we collect, why, and what you can do about it.

What we collect

Account data. When you sign in through Google we receive your email address, name, and profile image. We store this to authenticate you and address you correctly inside the product.

Brand memory you provide. During onboarding you share your brand name, industry, offer, audience, brand voice preferences, and reference URLs. This is the raw material the AI uses to generate work for you. It stays associated with your account only.

Content you generate. Every site, copy draft, image, and voice session you produce inside WRKS is stored so you can return to it. It is yours to use. We do not train models on it.

Contact-form submissions to your published sites. When a visitor fills in a form on a site you publish, the fields they submit and a hashed IP address are stored so you can read the lead inside the studio. That data belongs to you; we use it only to show it to you and to filter spam.

Uploads. Files you upload (logos, reference photos, brand assets) are stored in our object storage bucket and served back to you via signed URLs.

Usage telemetry. We log basic events (page views, which features you used, error traces) so we can debug and improve the product. This is not sold or shared.

Third-party services we use

To operate WRKS we rely on the following processors:

• Clerk — authentication (stores email, name, session tokens)
• Supabase — database + object storage (stores your brand memory, generated content, and uploads)
• Vercel — hosting (serves the app and your published sites)
• Anthropic — LLM inference (Claude models generate your sites and copy; prompts + your business context are sent, no training on the data)
• Replicate (running OpenAI's GPT Image 2) — image generation (image prompts are sent, generated images returned)
• ElevenLabs — voice agent (voice sessions are streamed for real-time transcription and response)
• Pexels — stock imagery for site generation
• Stripe — payments (card details are entered on Stripe’s pages and never reach us; we store your customer and subscription ids)
• Google — sign-in provider (as configured by you at account creation)

Each of these has its own privacy policy. We only send them the data strictly needed to fulfill your request.

How we use your data

• Authenticate you and personalize the product to your brand
• Generate the sites, copy, and images you request
• Persist your work so you can return to it later
• Debug errors and improve the product
• Contact you about your account (billing, security, updates)

We do not sell your data. We do not use your generated content to train models — ours or anyone else’s. We do not send you marketing email you didn’t opt into.

Cookies

We use a small number of first-party cookies for authentication (Clerk session) and remembering your UI preferences (theme, sidebar state). We do not use third-party advertising or tracking cookies.

Your rights

You can, at any time:

• Export all your data via a request to the email below
• Delete your account and all associated data from Settings, straight away (backups expire within 30 days)
• Correct any information in your brand memory from the Brand page in the product
• Ask us what specific data we hold on you

If you’re a resident of the EU, UK, or California, you have additional rights under GDPR, UK GDPR, or CCPA. Reach out and we’ll honor them within the required timeframe.

Data retention

We retain your account and generated content for as long as your account is active. If you delete your account we remove your data straight away and it leaves our backups within 30 days, except where retention is required by law (billing records, which Stripe keeps for tax purposes for roughly seven years).

Security

Data is encrypted in transit (TLS) and at rest (managed by our infrastructure providers). We follow least-privilege access principles for all internal systems.

Children

WRKS Studio is a B2B product intended for adults running a business. We don’t knowingly collect data from anyone under 16.

Changes to this policy

When we make material changes to this policy we’ll email registered users and update the effective date at the top of the page. Continued use of the product after a change means you accept the new terms.

Contact

Email contact@wrksstudio.com for any privacy question, data request, or complaint. We reply within five business days.