**The protection of your personal and business data is our top priority. WrkLst complies with the General Data Protection Regulation (GDPR) and the German Datenschutz-Grundverordnung (DSGVO).**

## We do not sell your data

WrkLst never sells or shares your personal or business data with third parties for advertising, profiling or any other commercial purpose. Your data remains yours.

## Custodians, not owners

We see ourselves as custodians of your information. Both personal and business data are protected, accessible only to you, and handled with care.

## Lawful processing

All data processing is carried out in accordance with GDPR and DSGVO, with strong encryption and strict security measures in place. See [Is WrkLst secure?](/hc/wrklst-docs/articles/1767343770-is-wrk_lst-secure) for the technical detail.

## Your rights over your data

You can access, rectify, delete and export your data at any time. Your entire account can be exported as a complete SQL dump on demand, so leaving WrkLst never means losing your records.

## Privacy by design and by default

Privacy-focused architecture is built into WrkLst at every level rather than added afterwards.

## Storage and transfers

All data is stored in line with EU regulations. Our servers are in Germany and Finland, with backups in Switzerland — see [How and Where is WrkLst Hosted?](/hc/wrklst-docs/articles/1767343809-how-and-where-is-wrk_lst-hosted). Any transfer outside the EU follows GDPR-compliant safeguards.

## AI and your data

AI is never applied to your data without your active, prior consent, and any feature that uses AI is clearly and transparently labelled. Where AI is used, it runs on open-source models hosted in Switzerland, your prompts are never recorded and never used to train a model, and AI can be switched off for the whole workspace. See [Does WrkLst use AI on my data?](/hc/wrklst-docs/articles/1786370964-does-wrk_lst-use-ai-on-my-data).

## Data Processing Agreement

A DPA is available to all customers — see [Does WrkLst Provide a Data Processing Agreement (DPA)?](/hc/wrklst-docs/articles/1767343936-does-wrk_lst-provide-a-data-processing-agreement-dpa).

For more detail on how we handle data, see our [Privacy Policy](https://wrklst.art/privacy-policy/) or contact us at [support@wrklst.art](mailto:support@wrklst.art).