Privacy Policy

1. Introduction

This Privacy Policy describes how Corben.ai ("Company", "we", "us") collects, uses, and protects your personal information when you use the OneShotWork platform ("Service"). We are committed to protecting your privacy and handling your data transparently.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and profile details when you create an account through our authentication provider (Clerk).
• Profile Data: Bio, skills, avatar, and role preferences you set in your OneShotWork profile.
• Task Content: Task descriptions, requirements, solutions, and messages posted on the platform.
• Payment Information: Billing details processed through Stripe. We do not store your credit card numbers directly.
• Uploaded Files: Documents, images, and other files attached to tasks or chat messages.

2.2 Information Collected Automatically

• Usage Data: AI model interactions, token usage, page views, and feature usage patterns.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: Session cookies for authentication and analytics cookies to improve the Service.

3. How We Use Your Information

• To provide, operate, and maintain the OneShotWork platform.
• To process payments and manage your account balance and token credits.
• To facilitate communication between task posters and solvers.
• To route your messages to AI model providers for generating responses in the workspace.
• To send you notifications about task updates, bids, and account activity.
• To detect fraud, abuse, and enforce our Terms of Service.
• To improve our platform based on aggregate usage patterns.
• To respond to your support requests and inquiries.

4. Data Sharing and Third Parties

We share your information with the following categories of third parties:

• Authentication Provider (Clerk): Account and login data for secure authentication.
• Payment Processor (Stripe): Payment and billing information for transaction processing.
• AI Model Providers (Anthropic, OpenAI, Google, DeepSeek): Chat messages and context sent to AI models during workspace sessions. These providers have their own privacy policies.
• Cloud Infrastructure (Supabase, Vercel): Data storage and hosting services.
• Other Users: Your public profile, task listings, and submitted solutions are visible to other platform users.

We do not sell your personal information to third parties. We may disclose information if required by law or to protect the rights, safety, or property of our users or the public.

5. AI Chat Data

When you use the AI workspace, your messages are sent to third-party AI providers to generate responses. Important details:

• Chat messages include the task context (title, description, requirements) to provide relevant AI assistance.
• AI providers may process your messages according to their own data policies.
• We store conversation history in our database to allow continuity across sessions.
• You should not share sensitive personal information (passwords, SSN, etc.) in AI chat sessions.

6. Data Security

• We use industry-standard encryption (TLS/SSL) for data in transit.
• Database access is restricted and authenticated using service-role keys.
• Payment data is handled entirely by Stripe and never stored on our servers.
• We regularly review and update our security practices.
• Despite our efforts, no method of transmission over the Internet is 100% secure.

7. Data Retention

• Account data is retained as long as your account is active.
• Task and conversation data is retained for the lifetime of the associated task.
• Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law.
• Aggregated, anonymized data may be retained indefinitely for analytics purposes.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain processing of your data.
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.

To exercise any of these rights, contact us at privacy@corben.ai.

9. Cookies

We use the following types of cookies:

• Essential Cookies: Required for authentication and core platform functionality.
• Analytics Cookies: Help us understand how users interact with the platform.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

10. Children's Privacy

OneShotWork is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. International Users

OneShotWork is operated from the United States. If you are accessing the Service from outside the US, please be aware that your data may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

For questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@corben.ai.