MyDataWork, LLC, a Delaware limited liability company based in Illinois, United States (“we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using MyDataWork, you agree to this policy.
What information we collect
We collect information in two categories:
Information you provide directly:
- Name and email address when you register
- Workspace name and organizational details
- Content you enter into the Service, including asset names, file paths, use case descriptions, notes, and stakeholder information
- Communications you send us for support or feedback
Information collected automatically:
- Log data such as IP addresses, browser type, pages visited, and timestamps
- Usage patterns within the application to help us understand how the Service is used and improve it
We do not collect the contents of files on your computer. The local Connector application reads only structural metadata — file names, paths, sizes, modification dates, and schema-level references such as table and column identifiers — never file contents, cell values, or query results. Cloud sources (GitHub, Databricks, dbt Cloud, Snowflake) fetch and parse source or schema metadata in order to extract structure, then discard the fetched content; only the resulting structural metadata is stored.
AI processing
When you use an AI feature, MyDataWork sends only stored structural metadata (asset names, paths, tool types, lineage) and your use-case free text (titles, descriptions, notes, value figures) to the model. Stakeholder names and emails are stripped before any AI call — only a neutral role label can reach the model. No file contents or data values are ever sent. AI features can be disabled in workspace settings.
How we use your information
We use the information we collect to:
- Create and manage your account
- Provide, maintain, and improve the Service
- Respond to support requests and communications
- Send transactional emails such as account confirmations and password resets
- Send product updates and announcements (you may opt out at any time)
- Detect and prevent fraud, abuse, or security incidents
- Meet legal obligations
We do not use your information for advertising and we do not build advertising profiles.
Information sharing and disclosure
We do not sell your personal information. We do not share your information with third parties for their own marketing purposes.
We share information only in the following limited circumstances:
- Service providers: We use third-party vendors to operate the Service, including Amazon Web Services (cloud infrastructure and email), Stripe (payment processing), and OpenAI (AI features). Only structural metadata and the free text you author in use-case titles, descriptions, and notes is sent to OpenAI. Stakeholder names and emails are stripped before any AI call, and file contents and data values are never sent. These providers process data only as necessary to deliver their services and are bound by appropriate data protection agreements.
- Legal requirements: We may disclose information if required by law, court order, or to protect the rights, property, or safety of MyDataWork, our users, or the public.
- Business transfers: If MyDataWork is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
Data storage and security
Your data is stored on Amazon Web Services infrastructure in the United States (us-east-1 region). We implement the following security measures:
- All data is encrypted in transit using TLS
- All data is encrypted at rest
- Passwords are hashed using bcrypt and never stored in plaintext
- Authentication uses short-lived JWT tokens
- Access to production systems is restricted to authorized personnel
No method of transmission or storage is completely secure. We cannot guarantee absolute security and are not responsible for unauthorized access resulting from circumstances beyond our reasonable control.
Data retention
We retain your account information and workspace data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow for export, after which it is permanently deleted. If you delete your account through the self-service deletion flow, all data is removed immediately, with no 30-day retention period.
We may retain certain information for longer periods where required by law or for legitimate business purposes such as fraud prevention, dispute resolution, or enforcing our Terms of Service. Where we need to remember something tied to your email address — such as eligibility for a one-time free assessment — we store a one-way SHA-256 hash of the address, never the plaintext email.
Cookies and tracking
The MyDataWork application uses session-based authentication tokens stored in your browser. The application does not use third-party advertising cookies or tracking pixels, and we do not participate in cross-site tracking or build advertising profiles. Our public marketing website may use privacy-respecting, first-party analytics to understand site traffic; it is not used for advertising.
Your rights and choices
Depending on your location, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), including the following:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your account and associated data
- Export (data portability): Export your complete workspace as a structured, machine-readable JSON file at any time from the Setup tab — supporting the GDPR Article 20 right to data portability
- Opt-out: Unsubscribe from non-transactional emails at any time
To exercise any of these rights, contact us at contact@mydatawork.com. We will respond within 30 days.
Children’s privacy
MyDataWork is a professional tool intended for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. The effective date at the top of this page reflects when the policy was last updated. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
Contact
For privacy-related questions, requests, or concerns, please contact us at: contact@mydatawork.com