Privacy notice

Who operates this service and how to contact us

This notice describes the WorkAuto service at workauto.net. The service operator manages the app and its support queue. Use our Contact and privacy request form without signing in, or use Help & capabilities inside your account. The form reaches the operator; it does not send an automatic email reply.

Information we handle

Sites-managed ChatGPT sign-in supplies account identifiers and email information for authentication and access control. WorkAuto stores information you provide, including profile details, audiences, conversations, files, connections, applications, institution memberships, settings, support requests and action records. Operational services can process request metadata such as IP address, browser information, timing and error status to deliver and protect the service.

OneWorld stores activity completions and optional reflections privately for their author. These are not included in shared invitations or sent automatically to AI. You can edit, export loaded journal entries or delete individual entries. Optional career tools store your plans, mentoring requests, private notes, appointments and outcome reports. Sharing choices are described at the point of use. Do not submit passwords, payment card information, private identity documents or unnecessary sensitive information.

Imported contacts

If you choose Save contacts privately, WorkAuto stores the imported names, email addresses and phone numbers in your account until you remove them or close your account. Other members cannot browse your imported address book. You can delete contacts, undo the latest import during the current session, and turn off automatic matching. Matching runs while the contacts panel is open and respects profile visibility and blocks. It does not automatically invite non-members or create accepted friendships. One-time contact searches remain transient. Google and Outlook background contact sync is not connected.

Why we use it

We use information to provide the features you request, enforce audiences and permissions, manage membership and moderation, respond to support or privacy requests, prevent abuse and investigate service failures. Suggestions based on profile skills use explicitly entered skills. Self-reported progress is not a verified qualification or hiring decision.

Sharing and visibility

Your selected audiences control profile and content visibility. Conversations require participant or authorised organisation-inbox access and are not end-to-end encrypted. Institutions have separate membership permissions; employers do not receive school rosters or private student contributions through career partnerships.

Career plans and personal mentoring notes stay private to their author. Mentor offers and advisor availability are shown to signed-in adult users after you publish them. Mentoring goals are shared with the selected mentor; appointment reasons are shared with the advisor. Outcome reports are shared with the relevant employer’s current owner or administrators for confirmation.

WorkAuto uses OpenAI Sites hosting and managed identity, with Cloudflare-backed application storage and runtime services. These providers process service information as part of delivering the app. A service may process information outside your country; choosing a local town does not select a data-residency region. People who receive or download content may retain their own copies. External sites you choose to open have their own privacy practices.

Status updates and media

You choose whether an update contains a place label, photos, videos or tags of accepted connections. A location tag is text you enter; it does not enable tracking. Tags do not grant access to a post, and tagged members can remove their own tags. Tag notifications are created only when the recipient can see the post. Photos and videos follow the post audience; 24-hour status media becomes inaccessible when the status expires. Publication does not guarantee that recipients have not saved copies.

Unpublished uploads are private to their author and use the existing storage allowance and unsent-file cleanup controls. Composer drafts, including selected attachment identifiers, are saved for your account in this browser tab. Uploads remain on the server until published, removed or cleaned up; closing the composer does not publish them.

Operator SMS

When an authorised operator prepares a service SMS, WorkAuto stores recipient numbers, message text, permission source and delivery records privately in its operator workspace. Dispatch sends the number and text to the Matrix gateway at sms.matrixpng.net, which uses a physical SIM and carrier. Signed callbacks can update delivery state and route replies associated with WorkAuto messages. STOP suppresses future sends from this app; carrier-accepted messages and copies on phones cannot be recalled. HELP requests require operator review. Private chats are not automatically forwarded to SMS. SMS is not end-to-end encrypted.

Location, contacts and AI

Choosing a town does not require GPS and does not publish your location. Device-area searches use rounded coordinates. Live travel sharing requires an explicit action, browser permission, selected recipients and expiry; it is not continuous background or emergency tracking. Stop sharing in the travel controls.

One-time contact discovery processes the numbers or emails you select transiently. Saving a private contact book retains the selected contacts as described above. Discoverable members can be matched unless matching is disabled. Mobile numbers are self-declared, not phone-verified. A new connection still requires acceptance.

The manual ChatGPT editing handoff prepares text for you to review and copy; it does not automatically send private fields to an AI service. Opening or submitting text to ChatGPT is a separate action under that service’s terms.

AI companion conversations

AI companions are fictional characters, always labelled as AI. WorkAuto stores each companion conversation privately in your account. When you authorise a request, your connected ChatGPT session can read that companion conversation and save one reply. The private companion tools do not read your human conversations, address book or precise location, and cannot post publicly or contact other people. Pending permission expires after one hour; you can cancel it sooner. Delete conversation removes the messages from WorkAuto, but does not delete copies already in ChatGPT. Your ChatGPT service terms, availability and usage limits apply. Direct model inference and unattended AI-member activity are not enabled by ordinary WorkAuto sign-in.

AI roundtables store a private topic and up to ten AI contributions under your account. Starting one authorises your connected ChatGPT session to read and continue it for up to one hour; Stop ends further contributions, and Delete clears its topic and turns. Separate administrator-only publishing tools can create clearly labelled public AI tips in Updates, capped at three posts per rolling 24 hours with a pause control. Their instructions exclude private conversations; do not ask a publishing session to reuse private content. Public posts retain the AI character and version attribution. There is no unattended posting schedule connected.

Optional read-aloud uses an installed device voice when available. WorkAuto does not upload these messages to a speech service through this control. Live voice and video AI calls are not connected.

Device storage, cookies and the PWA

Managed authentication can use cookies. WorkAuto uses browser storage for settings, draft recovery and sample data. Its service worker caches public installation assets and an offline page; private API responses, conversations and uploads are excluded from that cache. Shared devices can retain browser working copies. Sign out and review browser storage before handing a device to someone else.

Retention and account controls

Records remain while needed for their active feature and available account controls. Expiry can hide sharing without immediately deleting every underlying record. Account & storage provides export, reversible deactivation and resumable account closure. Closure removes authored records and files in batches, replaces delivered messages with removal placeholders and retains a minimal account marker to prevent recreation. Recipient copies, operator security records and provider-managed retention can remain outside that process. A fixed deletion deadline for every provider copy is not promised here.

Your choices and requests

You can edit profile information, change audiences, disable discovery, stop location sharing, manage optional modules, export account information or request closure. Module switches hide screens; they do not cancel appointments, revoke shared information or end active commitments.

Use Contact to request access, correction, deletion, restriction or to object to a use of your information. We may need to verify identity and authority before acting. Additional rights and complaint routes can depend on your country. This notice does not waive rights available under applicable law.

Age and changes

Your account must meet the identity provider’s age and permission requirements. Education and optional career tools currently require self-confirmation of age 18 or older; this is not independent age assurance. Younger-student and guardian onboarding is not enabled. Material changes to this notice will be published here with an updated date.