This policy describes how Quadralay Corporation, doing business as WebWorks
("WebWorks," "we," "us"), collects, uses, and shares personal information. One policy covers our three surfaces:
- webworks.com โ our website;
- the WebWorks Platform (platform.webworks.com) โ the cloud service where documentation teams configure
AI Assistants and Knowledge Bases; and
- the assistant chat surface that our customers deploy inside their own published help sites.
Who this policy covers
Website visitors browsing webworks.com. Platform customers โ the documentation
teams who hold accounts and organizations on the WebWorks Platform. And
readers of our customers' published help โ you don't have an account with us, but when you ask the AI
assistant on a customer's help site a question, that question passes through our service.
Information we collect
If you visit webworks.com
- Usage data โ IP address, browser type, pages visited, and similar diagnostics, collected through the
analytics described below.
- What you send us in forms โ contact, download, and support forms collect details like your name, email
address, and company so we can respond. Forms are protected by Google reCAPTCHA.
If you use the WebWorks Platform
- Account information โ name, email address, and an optional profile picture, managed through our authentication
provider (AWS Cognito).
- Organization information โ membership, roles, and invitations (an invitation involves the invitee's
email address).
- Billing information โ payments are processed by Stripe. We keep transaction and credit-ledger
records and the card brand and last four digits for display;
we never store full card numbers on our systems.
- Your content โ Knowledge Base files you upload and the assistant configurations and prompts you author,
stored on AWS infrastructure.
- Usage data โ assistant interactions, credit consumption, and operational logs.
If you use an assistant in a customer's published help
- Your questions and the assistant's responses. Conversations are processed to generate answers, maintain
your conversation thread, meter usage, and operate abuse prevention.
- Your IP address, used for rate limiting and abuse prevention.
- An anonymized token stored in your browser so your conversation can continue across questions. It
does not identify you by name โ we don't ask for your name or email, and you have no account with us.
The help site itself is operated by its publisher โ our customer. Their privacy practices govern the rest of their
site; this policy covers what happens when your question reaches our service.
How we use information
- To provide the services โ including generating assistant answers grounded in the relevant Knowledge
Base.
- To bill โ credit purchases, consumption metering, and billing history.
- To keep the services safe โ rate limiting, automated moderation of assistant traffic, and abuse prevention.
- To communicate โ transactional email (account, billing, and invitation notices, delivered via AWS
SES); marketing email only where permitted and always with an unsubscribe option; sales inquiries are tracked in our
CRM.
- To understand and improve the services โ analytics as described below.
- To meet legal obligations and protect our rights, our users, and the public.
AI processing
Assistant responses are generated using OpenAI as our AI provider. To answer a question, we send the question,
relevant conversation context, and relevant Knowledge Base content to OpenAI for processing on our behalf. Under
OpenAI's API terms, content submitted through its API is not used to train OpenAI's models. We use conversation data
to operate the service โ answer generation, safety, and billing โ not to build advertising profiles.
Cookies and analytics
- Essential cookies โ the Platform uses session cookies for sign-in. These are required for the service
to work.
- Analytics โ we use Google Analytics on webworks.com and the Platform to understand usage. You can
opt out with the
Google Analytics opt-out browser add-on.
- reCAPTCHA โ website forms use Google reCAPTCHA, subject to Google's
privacy policy
and terms.
- We use no advertising cookies, and we do not sell personal information.
Sharing and subprocessors
We do not sell personal information. We share it with service providers who process it on our behalf, and only for
the purposes described here:
| Provider | Role | Data involved |
| Amazon Web Services | Hosting, storage, authentication (Cognito), email delivery (SES) | Service data generally |
| Stripe | Payment processing | Billing details and payment methods |
| OpenAI | AI response generation | Assistant questions, conversation context, and Knowledge Base content needed to answer |
| Google | Analytics; reCAPTCHA on website forms | Usage data; form-protection signals |
| Salesforce | CRM for sales and support inquiries | Contact details you submit to us |
| Constant Contact | Marketing email | Name and email, with opt-out |
We may also disclose information when required by law or legal process, to protect the rights, safety, or property
of WebWorks, our users, or the public, or as part of a merger, acquisition, or asset sale โ in which case we will
provide notice before your information becomes subject to a different policy.
Retention and deletion
- Accounts and content โ retained while your account is active. After closure, Knowledge Base files
remain exportable for thirty (30) days on request (per the Terms of Service), after which content is deleted from active
systems, subject to backup cycles and legal obligations.
- Billing records โ retained as required for tax, accounting, and audit purposes.
- Assistant conversations โ retained as needed to operate the service: conversation continuity, billing,
moderation, and abuse prevention.
- Analytics data โ retained per our analytics configuration.
Security
We protect personal information with encryption in transit, access controls, and least-privilege practices on our
infrastructure. No method of transmission or storage is completely secure; if you have reason to believe your data
or account has been compromised, contact us immediately.
Your rights and choices
- Access and update your account information in your account settings, or contact us for access, correction,
deletion, or export of your personal information. We may verify your identity before acting on a request.
- Marketing opt-out โ every marketing email includes an unsubscribe link; transactional notices about
your account continue while the account exists.
- Regional rights โ depending on where you live (for example, the EEA and UK under GDPR, or California),
you may have specific legal rights to access, correct, delete, or port your personal information, to object to or restrict
certain processing, and to complain to your local supervisory authority. We honor these rights where they apply and
will not discriminate against you for exercising them.
- Reading a customer's help site? For questions about that site, contact its publisher. For the assistant-conversation
processing we operate, contact us and we will help directly.
Children
Our services are built for professionals and are not directed to children. Platform accounts require you to be at
least 18. We do not knowingly collect personal information from children under 13; if you believe a child has
provided us personal information, contact us and we will delete it.
Where data is processed
Our services are operated from the United States on AWS infrastructure. If you use them from elsewhere, your
information is transferred to and processed in the United States, where data-protection laws may differ from those
in your jurisdiction.
Changes to this policy
We may update this policy. For material changes we will post the updated policy with a new "Last updated" date and
notify Platform account holders by email or an in-service notice before the changes take effect.
Contact
Quadralay Corporation (WebWorks)
7600 Burnet Road, Suite 108, Austin, TX 78757
info@webworks.com ยท (877) 693-2967