Legal

Workilo Privacy Policy

This Privacy Policy describes the terms of our commitment to your privacy.

About This Policy

This Privacy Policy applies to Workilo, the SaaS marketing automation platform operated by AIAB Software Group Inc., a federally incorporated Canadian corporation. References to "we," "us," or "Workilo" in this document refer to AIAB Software Group Inc.

Persons or Parties Covered

This Privacy Policy is intended to cover all visitors to the Workilo website, all subscribers to lists or newsletters, all members or affiliates, and all customers. Persons who visit or view this website, whether intentionally or unintentionally, whether solicited or unsolicited, are described herein as "Visitors" and are parties to this Privacy Policy. Subscribers to lists or newsletters are referred to herein as "Subscribers" and are parties to the Privacy Policy. Persons who join an organization or marketing endeavor (e.g., "affiliates") promoted by this website are called "Members" herein and are covered by this Privacy Policy. Finally, anyone who orders, attempts to order, or receives a product or service sold or advertised on or delivered from this website, even at no cost, is called a "Customer" herein and is subject to this Privacy Policy. The website, its agents, owners, operators, and employees are referred to collectively herein as "Website," "Site," and/or "Workilo."

Persons Excluded From This Website Are Still Covered

In the event that a person is excluded from this website because of the Terms of Use or from denial of service by the website, who nonetheless unlawfully views this site, that person remains subject to the terms of this Privacy Policy and is in violation of the Terms of Use.

Viewing/Use/Communication = Acceptance

Acceptance of the terms of this Privacy Policy is a portion of the consideration required for your right to visit the website. If you do not accept these terms, you have no right to visit this site and may not use it.

About the Personal Information This Website Collects and How It Is Used

This website routinely collects information about its visitors, subscribers, members, and customers via:

Registration

Registration means that the Visitor, Subscriber, Member, or Customer takes active, positive steps to communicate information to this website (e.g., newsletter signup, surveys, information requests, joining a program, or ordering a product).

Online Ordering

Online ordering via SSL encrypted communication generally does not expose complete credit card numbers to Workilo. In the process of online ordering, you may provide name, address, email, phone, and other details. This information is used to deliver products/services and may be used for service or feature communications.

Visitor Email Inquiries

Website visitors who communicate with the website give permission for the website to contact them and are subject to any submission provisions of the Terms or this Policy. Your email may be added to our general communications database. You can unsubscribe at any time.

Customer Emails or Testimonials

If you are a customer and communicate with the site by email/phone/mail, Workilo may collect information about your communication for support and service purposes. Testimonials may be publicized for commercial purposes with your permission where required.

Interactions with Banners, Pop-ups, or Advertisers

Visitors clicking on ads must assume information is collected by third parties via cookies or similar means. Workilo is not responsible for third-party advertiser practices. Review their policies independently.

Referring Emails/URLs

If you refer this site to a friend, some data (such as IP/email) may be collected to facilitate the referral. You accept full responsibility for such referrals and indemnify this site for related outcomes.

Surveys

Information provided via surveys may be used for product design, support, and communications. We may share aggregated insights with partners or use internally.

Electronic Means & Cookies

We may collect technical information (e.g., IP address, device/browser data, usage) and use cookies to keep you logged in, remember preferences, analyze usage, and secure access. By using this site, you consent to our use of cookies and the information derived from them. See also our cookie notice if provided.

Third-Party Platform Connections

Facebook / Meta

When you connect a Facebook Page, Instagram Business account, or Threads account to Workilo, we receive and store the following information from Meta:

  • Account identifiers (Page IDs, Instagram Business Account IDs, Threads account IDs) and display names
  • Profile photo URLs (used to display your connected account in the Workilo UI)
  • An OAuth access token that allows Workilo to publish content and read engagement metrics on your behalf
  • Post engagement data (impressions, reach, reactions, comments, link clicks) for posts published through Workilo

We use this information solely to deliver the Workilo posting and reporting features you have signed up for. We do not sell, rent, or share Meta-derived data with third parties for advertising or marketing purposes. Access tokens are encrypted at rest. You may disconnect any Meta account at any time from Workilo Settings → Connected Accounts; doing so revokes the access token and deletes our copy of it within 24 hours.

If you wish to delete all data Workilo holds about you, including any Meta-derived data, see our Data Deletion page or email privacy@workilo.io.

LinkedIn and Other Platforms

When you connect a LinkedIn account or other third-party platform to Workilo, we receive and store account identifiers, display names, and an OAuth access token. We use this information solely to deliver the publishing and reporting features you have enabled. The same data handling principles described above for Meta apply to all connected third-party platforms.

AI Processing

Workilo's core feature is AI assistance. When you send a message to an assistant, the relevant conversation content, which may include documents or connected-account data you have asked the assistant to work with, is transmitted to our AI model providers (such as Anthropic, OpenAI, and Google) strictly as data processors, solely to generate the response you requested. Our agreements with these providers prohibit them from using your data to train their models.

We do not use your content or personal information to train or improve generalized artificial-intelligence or machine-learning models, and we do not permit our model providers to do so.

Google User Data

If you choose to connect your Google account, this section describes exactly what we access and how we handle it. Notwithstanding any other provision of this Privacy Policy, this section exclusively governs all information obtained through Google APIs.

What we access

Depending on which features you use, and only after you grant permission through Google's consent screen, Workilo may access:

  • Basic profile (sign-in): your name and email address, to create and identify your Workilo account.
  • Google Drive, Docs, Sheets, and Slides: the ability to list and search your files, read files you ask an assistant to work with, and create or update files at your request.
  • Google Calendar: the ability to list your calendars and read, create, update, or delete events at your request.
  • YouTube: if you connect a channel for publishing, the ability to see that channel's name and to upload the videos you choose to post to it. We do not edit or delete existing videos.
  • Google Analytics: read-only access to run reports on your Analytics properties at your request.

How we use it

Google user data is used solely to provide the user-facing features you actively invoke, for example summarizing a document you name, creating an event you describe, answering a question about your site traffic, or uploading a video you chose to publish. Every access is triggered by your specific instruction, and results are shown only to you. We never read, scan, or synchronize your Google data in the background.

When you ask an assistant to work with your Google content, the relevant content is transmitted to our AI model providers as described in the AI Processing section above, solely to generate the response you requested. We do not use Google user data, and do not permit our model providers to use it, to train or improve generalized artificial-intelligence or machine-learning models.

YouTube API Services

Workilo uses YouTube API Services to upload videos you choose to publish to a YouTube channel you connect. By using this feature you are bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. For every video you choose its visibility and whether it is made for kids, and nothing is published until you confirm. We do not store YouTube content or viewer data, and we do not collect information from YouTube pages.

How we store and protect it

Google OAuth tokens are stored encrypted at rest. Content retrieved from Google APIs is used to fulfil your request; where results are saved into your workspace (for example, a conversation transcript containing a document summary), they remain under your control and can be deleted by you at any time. All data is transmitted over encrypted (TLS) connections.

Who we share it with

We do not transfer Google user data to any third party except: (a) the AI model providers described above, acting on our instructions to generate your requested output; (b) as necessary to comply with applicable law; or (c) as part of a merger or acquisition, with prior notice to you. We do not sell Google user data, use it for advertising, or allow humans to read it except with your explicit consent, where necessary for security or abuse investigation, or to comply with law.

Limited Use disclosure

Workilo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access and deleting your data

You can disconnect your Google account at any time from your settings inside Workilo, which deletes our stored tokens, or from your Google Account security settings. To request deletion of any Google user data retained in your workspace, delete the relevant content in-app or contact us via the contact page or at privacy@workilo.io; we will complete deletion requests within 30 days.

How Information May Be Used

Information collected may be used to operate and improve the site, deliver products/services, provide support, develop features, and communicate with you. We may share information with vendors or partners who assist our operations. We do not sell your personal data. Financial data is only shared with payment processors or law enforcement as required.

Where Your Data Is Stored and Processed

Your account, workspace, client records, uploaded documents, generated outputs and logs are stored on dedicated servers in Toronto, Canada. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

To produce work, Workilo sends the prompt for each step, along with the context that step needs (which can include content from your workspace), to a third-party AI model provider. That is a transfer of information to the provider, and the provider processes it in its own jurisdiction:

  • OpenAI: United States. Default for most Workalongs.
  • Anthropic (Claude): United States. Default for long-form writing.
  • DeepSeek: China. Opt-in only, when you pick it for a custom agent.
  • Cohere: Cohere public API (Canadian company; region not pinned). Opt-in only, when you pick it for a custom agent.

Information processed outside Canada is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities. Because the default providers run in the United States, standard plans are not suitable for information that must not leave Canada. For that, Enterprise offers:

  • Managed sovereign deployment: We run your workspace with inference pinned to Canadian infrastructure and a provider list you approve. Nothing routes to the US or China.
  • Self-hosted: Run Workilo inside your own environment, on your own servers or cloud account, with the models you choose. Your data never touches ours.

The current routing is published at /canadian-hosted-ai-for-regulated-businesses (last checked 2026-09-24). We will update this policy and that page when a route changes.

Information That Is Not Shared

Credit card information or other financial information is not typically known to Workilo. If it is, we will only share it with payment processors, anti-fraud services, or law enforcement where required by law.

Bulletin Boards and Public Forums

If you use any public forum (e.g., community, chat), you do so at your own risk. Information you post may be visible to others. Exercise caution when sharing personal information.

Spam

By providing an email address, you consent to receive communications from Workilo. All messages will include an unsubscribe option. You may opt out at any time.

Data Security

We take reasonable measures to protect data. However, no method of transmission or storage is 100% secure. By using this site, you agree Workilo is not responsible for damages arising from unauthorized access or misuse.

Revisions to This Privacy Policy

This Privacy Policy may change from time to time. Material changes may be communicated via the site or email. Your continued use of the site after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions, contact us at privacy@workilo.io.