Privacy and security

Privacy and EU hosting

Where it runs The app, its database, and its file storage run on Hetzner servers in Germany. Every model runs in the EU: - Gemini on Google Cloud's Vertex AI, EU region - GPT on Microsoft Azure's EU Data Zone - Claude on AWS Bedrock's EU regions - the free model (Qwen) on Hetzner's Inference API in the EU Chat titles, summaries of long chats, scanned-PDF reading, and dictation use a Gemini model in the EU, whichever model you pick for your chats. No index, and no training Chat with Work doesn't copy your company's data in advance. It searches your tools live when you ask, with your own access, and reads only what the answer needs. The model gets your question, the chat, and what your tools returned. We don't train models on your data, and our model providers' business terms say they don't either. What's encrypted The app encrypts these before they reach the disk: your questions and the answers, chat titles, what the assistant read from your tools, cached text, connector tokens, instructions and memories, files you attach, and files the assistant makes. What isn't encrypted by the app: account details such as names, email addresses, and settings, and records like usage and audit events, which hold no chat content. Backups are encrypted. How long things are kept - Cached text from your tools is deleted after 30 days without being used, or as soon as you disconnect that tool. - Chats stay until you delete them. A deleted chat disappears at once and is permanently deleted 30 days later. We keep a record of the tokens and cost each answer used, without any content, for credits and billing. - Disconnecting a connector deletes its tokens and everything cached from it. - Backups are kept under our backup schedule, so deleted data can remain in them until they expire. See "Deleting your data" for the steps. Web search leaves the EU Web search is off by default. An owner or admin has to allow it for the organization, and then each person turns it on per chat with the globe beside the model picker. When it's on, the searches the assistant writes go to Google (for Gemini) or Bing (for GPT), outside the EU and outside our data processing terms. The assistant is told to keep private details out of what it searches for. The models themselves still run in the EU. Settings, People: the Web search switch, which says the queries go to Google or Bing, outside the EU Who can see your work Admin screens never show chat or document text. Inside your organization, private chats stay private, owners and admins included. The full details are in the privacy policy at chatwithwork.com/privacy-policy and on the security page at chatwithwork.com/security. Questions? Click the chat bubble in the corner of the app, or write to support@chatwithwork.com.

Deleting your data

Delete a chat Open the chat's menu in the sidebar (the dots on its row) and choose Delete. Only the person who started a chat can delete it. A chat's menu in the sidebar, with Rename, Pin, Move to project, and Delete - The chat disappears at once and its public link stops working. - 30 days later its messages, tool results, attachments, files, title, and summary are permanently deleted. - A record of the tokens and cost each answer used stays, without any content, so credits and billing still add up. We don't delete chats automatically. They stay until you delete them. Text cached from your tools To answer quickly, Chat with Work caches text it read from your tools, encrypted. Anything not used for 30 days is deleted automatically. Disconnect a connector In Settings ▸ Connectors, click the disconnect button on its row. We delete its tokens and everything cached from it right away. With several accounts of one service, this applies to that account only. For Google, Dropbox, and Slack we also revoke the access with the service. Microsoft and Basecamp don't let an app revoke itself, so remove Chat with Work in your Microsoft or Basecamp account settings too. For Odoo, delete the API key you created there. For your own MCP servers, removing one deletes what we stored, but revoke any credentials on the server yourself. Disconnect on a computer in Settings ▸ Connectors ▸ Computers works the same way: it deletes the text cached from that computer. Memories Settings ▸ Instructions lists what the assistant remembers about you, with Forget on each, and a switch to turn memory off. Settings, Instructions, Memory: the switch that lets the assistant remember things, above the list of what it remembers Leave an organization In Settings ▸ People, click the leave button next to your name ("Leave" and the organization's name) and confirm. The owner can't leave their own organization. Your connectors there are disconnected, and your private chats there are deleted 30 days later. Chats you asked in projects stay with the project. Owners and admins remove someone the same way, with the same result. Delete your account 1. Open Settings ▸ Account. 2. Under "Delete your account", choose Delete account. 3. Type your email address and choose Delete my account. Settings, Account: the Danger zone, with Delete account It happens at once and can't be undone: - Your login is deleted. - Every organization where you're the only person is deleted, with its chats, files, connectors, and cached content, and its plan is cancelled. There's no separate button to delete an organization. - From organizations you share, you're removed as above. If you were the owner, the organization passes to an admin or the next member. Deleted data may remain in our encrypted backups until they expire. Stripe keeps its own payment records as tax law requires. More at chatwithwork.com/account-deletion and in the privacy policy at chatwithwork.com/privacy-policy. Can't sign in? Email support@chatwithwork.com from the address on your account and we'll delete it for you.