Translated for convenience; the German version is legally authoritative.
The controller within the meaning of the General Data Protection Regulation (GDPR) for this
informational website and the associated application is:
INSPIRED SOFTWARE, David Kubitsch, Schönfließer Straße 3, 10439 Berlin, Germany
Phone: +49 30 54632960 · Email: info@inspiredsoftware.de
This policy describes data processing for this informational website and the Workestral application, to the extent operated by us. Workestral is also distributed as software for independent installation on customers' own servers (see the installation guide). If your organization runs its own installation, your organization is itself the controller for the data of your users processed there and must provide its own privacy policy — this policy does not apply to an installation operated by your organization.
You have the following rights regarding your personal data processed by us:
To exercise these rights, please contact us at the address given above.
When you visit these pages, the web server automatically processes technical access information (including IP address, date/time, page requested, browser/OS identifier), as is technically necessary for the operation of any web server. This information is used solely to ensure the secure and stable operation of the site and is not combined with other data sources. On the purely informational pages (home, examples, pricing, first steps, installation, tips & tricks, and these legal pages) we do not use analytics or tracking cookies, nor any external analytics services.
To sign in to the application itself (/login and beyond), a technically
necessary cookie is set that keeps your session active for up to 30 days after login
(HttpOnly, SameSite=Lax). This cookie is required for the login
function and is not used for analytics or advertising purposes.
When you register or are invited to a team, we process your username, email address, and a password (stored exclusively as a salted hash, never in plain text). Task prompts you enter within the application, uploaded files, calendar/task entries, and the result documents generated from them are stored for the operation of the application and are visible only to authorized members of the respective team.
To execute a workflow step, the relevant task content (prompt, extracted text content, uploaded documents) is sent to the AI provider configured for that step by the respective team — depending on configuration, e.g. OpenAI, Anthropic (Claude), xAI (Grok), OpenRouter, or a self-hosted local Ollama model. When using a locally hosted model, content never leaves your own server. When using an external provider, content may be processed outside the EU; the respective providers act as independent processors under their own privacy terms. Each team's administrator determines which provider is used for which workflow step.
Converting speech to text (Whisper) and text to speech (Piper) runs entirely locally on the server hosting the application — no audio data is sent to an external cloud service for this purpose.
If the optional email automation feature is used, the application stores the IMAP/SMTP credentials you provide for the configured mailbox in order to read emails and reply to or summarize them according to the rules you define. The email content processed in this way originates from the mailbox managed by your own team.
Account, team, and usage data is stored for as long as the respective account or team exists. Upon request via the contact address above, data will be deleted unless statutory retention obligations require otherwise.
This privacy policy may be updated if data processing changes. The current version is always available on this page.