Privacy Policy
MyDataWork, LLC, a Delaware limited liability company based in Illinois, United States (“we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using MyDataWork, you agree to this policy.
What information we collect
Information you provide directly
- Name and email address when you register
- Workspace name and organizational details
- Content you enter into the Service, including asset names, file paths, use case descriptions, notes, and stakeholder information
- Communications you send us for support or feedback
Information collected automatically
- Log data such as IP addresses, browser type, pages visited, and timestamps
- Usage patterns within the application to help us understand how the Service is used and improve it
The Windows Connector does not transmit source files from your computer. It opens supported files locally to extract metadata such as names, paths, sizes, modification dates, tool types, schema references and content hashes. It sends the extracted metadata, not source file contents, cell values or query results.
Manual uploads and cloud connections are different processing paths. An uploaded file is processed by the service; cloud connectors fetch catalog metadata or source definitions according to the connector. Some, including GitHub, fetch source files for parsing. Source material is processed to extract metadata rather than retained as file contents. Descriptions, objectives, notes and value figures you enter are stored as authored work context.
AI processing
AI features send relevant stored metadata and authored work context to the model. Names and email addresses recorded in dedicated stakeholder fields are excluded. Text you write yourself, including titles, descriptions and objectives, is sent as written and may contain names or figures. Source file contents are not included in these AI requests.
How we use your information
- Create and manage your account
- Provide, maintain, and improve the Service
- Respond to support requests and communications
- Send transactional emails such as account confirmations and password resets
- Send product updates and announcements (opt-out available)
- Detect and prevent fraud, abuse, or security incidents
- Meet legal obligations
We do not use your information for advertising and we do not build advertising profiles.
Information sharing and disclosure
We do not sell your personal information. We do not share your information with third parties for their own marketing purposes.
Service providers: Amazon Web Services (cloud infrastructure and email), Stripe (payment processing), and OpenAI (AI features). If you choose to enable the optional Jira integration, use-case titles, descriptions, notes, stakeholder names and asset names are sent to the Jira instance you configure, at your direction.
Legal requirements: Disclosure if required by law, court order, or to protect rights, property, or safety.
Business transfers: Information may transfer upon acquisition or merger, with notification.
Data storage and security
Your data is stored on Amazon Web Services infrastructure in the United States (us-east-1 region). Security measures include:
- All data encrypted in transit using TLS
- All data encrypted at rest
- Passwords hashed using PBKDF2-SHA256
- Session authentication tokens valid for 7 days
- Restricted access to production systems
Data retention
Subscription cancellation retains live workspace data for 30 days. Explorer becomes read-only after its 90-day trial. You can browse and export throughout the following 30 days, counted from trial end. If you do not upgrade, its workspace contents are permanently deleted at the end of that period; your account and sign-in remain. Self-service account deletion removes the account from the live service. Contributions to a shared Team workspace remain with that workspace; deleting an entire workspace removes its live content. Automated database backups have a seven-day retention period, and deletion-audit records are handled separately from live workspace content.
Explorer is limited to one trial per email address. The eligibility record retained after account deletion contains a one-way hash of the address and the date it was claimed, not the original email address. This record enforces the one-trial limit and helps prevent abuse; deleting your account does not make you eligible for another Explorer trial. Deleting a MyDataWork account does not cancel an AWS Marketplace subscription; manage that subscription separately in AWS.
Cookies and tracking
The MyDataWork application uses session-based authentication tokens stored in your browser. The application does not use third-party advertising cookies or tracking pixels, and we do not participate in cross-site tracking or build advertising profiles.
Your rights and choices
- Access personal information
- Correction of inaccurate information
- Deletion of account and data
- Export workspace as a JSON file
- Opt-out from non-transactional emails
To exercise any of these rights, contact us at contact@mydatawork.com. We will respond within 30 days.
Children's privacy
MyDataWork is a professional tool intended for business use and is not directed to anyone under 18.
