This Privacy Policy explains how Otherworks LLC, a Nebraska limited liability company ("Otherworks," "we," "us," or "our"), collects, uses, shares, and protects personal information.

It applies to otherworks.ai, to our consulting and implementation services, and to any software, subscription, or product we operate, whether offered under the Otherworks name or under a separate trade name. A product may publish a supplemental privacy notice describing handling specific to that product. Where a supplement conflicts with this Policy, the supplement controls for that product only.

1. Our Two Roles

How we handle personal information depends on why we have it.

When we are the controller. For information about visitors to our websites, prospects, clients, and the individual users of our products, we decide why and how the information is processed. This Policy describes that processing.

When we are the processor. When you engage us to build, host, monitor, or automate systems on your behalf, we may process personal information belonging to your customers, leads, employees, or contacts. In that situation you are the controller and we act on your documented instructions. We do not use that information for our own purposes. Our handling of it is governed by your agreement with us, including any data processing terms, and by your own privacy policy rather than this one.

If you are an individual whose information we hold in a processor role, please contact the business you interacted with. We will refer your request to them.

2. Information We Collect

2.1 Information you give us

• Contact and account information. Name, business name, email address, phone number, job title, and account credentials.

• Engagement information. Details you share in intake forms, discovery calls, questionnaires, assessments, and support conversations, including information about your business, systems, goals, and challenges.

• Billing information. Billing name, billing address, and the last four digits and card type of your payment method. Full payment card numbers are collected and stored by our payment processor, not by us.

• Shipping information. For physical goods, the shipping address and order details.

• Content you submit. Files, documents, prompts, copy, brand assets, and other materials you upload or send us.

2.2 Information we collect automatically

• Log and device data. IP address, browser type and version, operating system, device identifiers, referring pages, pages viewed, and timestamps.

• Cookies and similar technologies. Described in Section 6.

• Product usage data. Features used, scans run, reports generated, and interactions within our applications.

2.3 Information we collect from third parties and public sources

To research, design, build, and support the systems you engage us for, we may collect information from sources other than you, including:

• Publicly available web content, including website pages, published documentation, and public business listings.

• Search engine results and AI assistant output, where an engagement involves measuring or improving how a business appears in them.

• Data from accounts and systems you connect to us, using only the permissions you grant. Depending on the engagement this may include analytics, search console, advertising, CRM, email, document storage, ticketing, or internal databases.

Most of this information concerns businesses rather than individuals. Where it includes an individual's name or other identifying detail, we treat it as personal information under this Policy. Where the connected system contains personal information about your customers, employees, or contacts, we handle it as a processor under Section 1.

We may also receive information from referral partners, agencies acting on your behalf, and integration providers.

2.4 Information we do not want

Please do not send us sensitive personal information, including government identification numbers, financial account credentials, health information, biometric data, or information about children, unless we have specifically requested it and agreed in writing on how it will be handled.

3. How We Use Information

We use personal information to:

• Provide, operate, maintain, and secure the Service.

• Perform the consulting, implementation, and subscription work you have engaged us for.

• Research, design, build, test, and support the systems you engage us for, and deliver findings and reports.

• Process payments, manage subscriptions, and fulfill orders.

• Communicate with you about your account, engagement, support requests, and service changes.

• Send marketing communications about our services, where permitted, with an unsubscribe option in every message.

• Improve our products and methodology through aggregated and de-identified analysis.

• Detect, investigate, and prevent fraud, abuse, and security incidents.

• Comply with legal obligations and enforce our Terms and Conditions.

We do not use client content or client data to train third party AI models. We select AI providers and configure our integrations with the intent that inputs and outputs are not used for model training. Provider practices can change, and we do not control them. See Section 5.

4. Legal Bases for Processing

For individuals in the European Economic Area, the United Kingdom, and other jurisdictions with similar requirements, we rely on the following legal bases:

• Contract. To provide the Service you have requested and to manage our relationship with you.

• Legitimate interests. To operate, secure, and improve our business, to market to business contacts, and to conduct research on publicly available business information, balanced against your rights.

• Consent. For optional cookies, certain marketing communications, and any processing where consent is required. You may withdraw consent at any time.

• Legal obligation. To meet tax, accounting, and other legal requirements.

5. How We Share Information

We do not sell personal information, and we do not share it for cross context behavioral advertising.

We share information in these circumstances:

5.1 Service providers. We use vendors that process information on our behalf under contracts limiting their use of it. Categories include:

• Cloud hosting, database, and infrastructure providers.

• Website building and content management platforms.

• Customer relationship management and marketing automation platforms.

• Payment processing.

• Transactional and marketing email delivery.

• AI model providers and gateways that process prompts and content to generate output.

• Search and search results data providers.

• Analytics and error monitoring.

• Shipping and fulfillment providers, for physical goods.

A current list of our subprocessors is available on request at privacy@otherworks.ai.

5.2 Across our products and trade names. Information may be shared across the products and trade names we operate where it supports providing the Service, billing, or support. These are all names under which the same business operates, so this is internal handling rather than disclosure to a third party.

5.3 At your direction. We share information with parties you ask us to, such as your agency, contractor, or platform vendor.

5.4 Legal and safety. We may disclose information when required by law, subpoena, or valid government request, or where we believe disclosure is necessary to protect our rights, the safety of any person, or the integrity of the Service.

5.5 Business transfers and reorganization. If Otherworks is involved in a merger, acquisition, financing, sale of assets, or a change in our state of organization or business form, including conversion or domestication into another jurisdiction, information may be transferred as part of that change. The successor will remain bound by this Policy. We will provide notice if the change affects how your information is handled.

5.6 Aggregated and de-identified data. We may create and share aggregated or de-identified data, including benchmarks and industry statistics, that cannot reasonably be used to identify you. We will not attempt to re-identify such data.

6. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, measure site performance, and understand how our site is used. Some are set by third party analytics and platform providers.

You can control cookies through your browser settings. Blocking some cookies may affect how the site functions. Where required by law, we present a consent banner before setting non-essential cookies.

We do not respond to browser Do Not Track signals, which are not supported consistently across browsers and have no agreed standard. Where required by applicable state law, we honor recognized universal opt-out mechanisms such as Global Privacy Control. Because we do not sell personal information or use it for targeted advertising, there is no such processing for these signals to disable.

7. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy, and then delete or de-identify it.

Typical retention periods:

• Account and client records: for the duration of the relationship, plus five years for legal, tax, and dispute purposes.

• Billing and transaction records: as required by tax and accounting law, typically seven years.

• Deliverables, reports, and system data: for the duration of the engagement or subscription, plus 60 days, so the work remains available to you after it ends.

• Prompts and AI inputs and outputs: retained only as needed to deliver and troubleshoot the Service.

• Marketing contacts: until you unsubscribe or ask us to delete your information.

• Log data: typically 90 days.

Data we process as a processor is retained according to your instructions and your agreement with us.

8. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the size of our organization and the sensitivity of the information, including encryption in transit, access controls, credential management, and vendor review.

No system is completely secure. We cannot guarantee absolute security, and you share information with us at your own risk. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

9. Your Rights

Depending on where you live, you may have the right to:

• Know and access. Confirm whether we process your personal information and obtain a copy.

• Correct. Ask us to fix inaccurate information.

• Delete. Ask us to delete your personal information.

• Portability. Receive your information in a portable format.

• Opt out. Opt out of the sale of personal information, targeted advertising, and certain profiling. We do not sell personal information or use it for targeted advertising.

• Withdraw consent. Where processing is based on consent.

• Non-discrimination. Exercise these rights without receiving worse service or pricing.

How to exercise your rights. Email privacy@otherworks.ai with your request. We will verify your identity, usually by confirming control of the email address associated with your information or by asking for information that matches our records. We respond within 45 days where required by state law, and within 30 days where required by the Nebraska Data Privacy Act, the GDPR, or the UK GDPR, and we may extend once where reasonably necessary. We will tell you if we extend.

Authorized agents. You may use an authorized agent where the law permits. We may require proof of authorization.

Appeals. If we decline your request, you may appeal by replying to our response with the word "Appeal." We will review and respond within the timeframe required by your state's law. If we deny the appeal, Nebraska residents may submit a complaint to the Nebraska Attorney General. Residents of other states may contact their state attorney general.

10. State and Regional Notices

Nebraska residents. The Nebraska Data Privacy Act provides rights to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling. We honor these rights as described in Section 9. We do not sell personal data or sensitive data.

California residents. We do not sell or share personal information as those terms are defined by the CCPA as amended. The categories of personal information we collect, the sources, the purposes, and the categories of third parties we disclose to are described in Sections 2, 3, and 5. You have the rights described in Section 9, including the right not to be discriminated against for exercising them.

Other United States residents. Residents of states with comprehensive privacy laws have rights similar to those described in Section 9. We extend these rights to all United States residents regardless of state, as a matter of practice.

EEA and UK residents. You have the rights described in Section 9, plus the right to object to processing based on legitimate interests and the right to lodge a complaint with your supervisory authority.

11. International Transfers

Otherworks operates in the United States, and our service providers may process information in the United States and other countries. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, we use appropriate transfer safeguards, such as the European Commission's Standard Contractual Clauses.

12. Third Party Sites

Our websites and deliverables may link to sites we do not operate. We are not responsible for their privacy practices. Review the privacy policy of any site you visit.

13. Children's Privacy

The Service is intended for businesses and for individuals 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact privacy@otherworks.ai and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy. When we do, we will revise the Last Updated date above. If a change materially affects how we handle your personal information, we will provide additional notice, such as an email or an in product notice, before the change takes effect.

15. Contact Us

Questions, requests, or complaints about this Policy or our data practices:

Otherworks LLC Privacy inquiries: privacy@otherworks.ai General inquiries: hello@otherworks.ai Mailing address: 9530 Blacksmith Ct Apt 10, Lincoln, NE 68507, United States

We aim to respond to privacy inquiries within five business days.