Privacy Policy

1. Who we are

Taro Ventures LLC, operating as Worksub, runs this website and builds software agents that perform one defined workflow for a client. This policy explains what we collect, why, and how we handle it. It covers two situations: visiting worksub.co, and being a client whose agent instance we operate.

2. Website visitors

We collect:

• Analytics. We use Google Analytics and Google Ads measurement to understand how the site is used and whether our advertising works. These set cookies and collect device, browser, approximate location, and page-interaction data. Google’s handling of this data is described in Google’s privacy policy.
• Booking. If you book a call, the booking is handled by Cal.com, which collects the details you enter (name, email, notes). We receive those details to run the call.
• Email. If you email us, we keep the correspondence.

We do not sell visitor data, and we do not run third-party advertising on the site.

3. Clients: what an agent instance processes

When we operate an agent for your company, the instance processes:

• Mailbox content in the specific mailbox you connect (for example, a certificates inbox), limited to mail received after the go-live date. Historical mail is not read.
• Reference data you provide, such as a book of business, policy details, and contact records, so the agent can match requests and fill forms.
• Output the agent produces: drafts, filled forms, flags for your team, and a log of each request and what happened to it.

This data may include personal information about your clients, their contacts, and requesters. You are the controller of that information; we process it on your instructions to provide the service.

4. How we use client data

• To run your instance: read requests, prepare drafts, and flag items for your team.
• To show you what the instance did, in your dashboard and logs.
• To secure, troubleshoot, and improve your instance.

We do not use your data to build or train products for other clients, and we do not pool or share data between clients. Each instance runs separately, with its own credentials.

5. Access and control

Instances access your systems only through permissions your administrator grants (an OAuth grant in Google Workspace or Microsoft 365, scoped to the connected mailbox). Your administrator can revoke that grant at any time, which stops the instance. The agent produces drafts only; it cannot send mail or issue documents.

6. Sub-processors

We rely on a small number of providers to run the service:

• Google (Workspace APIs) and Microsoft (Microsoft 365 APIs), to read the connected mailbox and place drafts.
• A cloud hosting provider, to run each instance and store its data.
• Model providers, to process request text and prepare drafts. We use provider settings that exclude your data from model training where the provider offers them.
• Cal.com and Google, as described in Section 2, for the website.

We will provide the current list of named providers on request and notify clients before adding one that processes client data.

7. Retention

We keep client data for as long as your instance runs. Within 30 days after termination we delete client data in our possession, except records we must keep to meet legal or accounting obligations. Website analytics data is retained according to Google’s default retention settings. Correspondence is kept as long as we need it to handle the matter.

8. Security

We use access controls, encryption in transit and at rest, per-client isolation, and audit logs. No system is perfectly secure; if we learn of a breach affecting your data we will notify you without undue delay.

9. Your rights

Depending on where you are, you may have rights to access, correct, delete, or restrict use of your personal information, or to object to processing. Website visitors can exercise these rights by emailing us. If your information was processed inside a client’s instance, please contact that client; we will assist them in responding.

10. Cookies

The site uses cookies set by Google Analytics and Google Ads for measurement. You can block cookies in your browser; the site works without them.

11. Children

The site and service are for businesses and are not directed at children under 16.

12. Changes

We may update this policy. The date at the top shows the current version. Material changes will be notified to clients.

13. Contact

Privacy questions: hello@worksub.co.