Privacy Policy

1. What Data We Collect

When you use CWO Hub, we collect the following information:

• Account information: Username, email address, password (stored as a bcrypt hash - never in plain text), display name, bio, location, and social links you choose to provide.
• Activity data: Comments you post, lessons you complete, and GPU jobs you submit.
• Uploaded files: Workflow JSON files submitted to the GPU job service, and avatar images you upload to your profile.
• Technical data: IP address (logged at account creation, login, and GPU job submission for security purposes), and standard server logs.

2. How We Use Your Data

• To provide and operate the Service (authentication, lesson access, community features, GPU compute).
• To scan submitted workflow files for security before execution (see §4).
• To send transactional emails: email verification, password reset. We do not send marketing emails without separate consent.
• To enforce our Terms of Service and Acceptable Use Policy.

3. What We Don't Do

We do not sell your personal data to third parties. We do not use your data for advertising targeting. We do not share your data with any third party except as described in §5 (Third Parties) and as required by law.

4. GPU Workflow Files

Workflow files submitted to the GPU job service are:

• Scanned by the Anthropic API (Claude) before execution to detect security risks. The workflow JSON is sent to Anthropic for analysis. Anthropic's Privacy Policy governs their handling of this data.
• Executed in an isolated Docker container with no network access.
• Output files are stored on our infrastructure and automatically deleted 7 days after job completion.
• Submitted workflow files are retained in our database for audit purposes for up to 90 days, then deleted.

5. Third Parties

CWO Hub uses a small number of third-party services:

• YouTube: Lesson videos are embedded from YouTube. YouTube may set cookies when you interact with embedded videos. We have no control over YouTube's data practices.
• Anthropic: Workflow files are sent to the Anthropic API for security scanning. No personal account information is included in these requests.
• No analytics trackers: We do not use Google Analytics, Facebook Pixel, or any third-party behavioral tracking scripts.

6. Cookies

We use only two cookies. See our Cookie Policy for full details.

• PHPSESSID - session cookie, required for login. Deleted when you close your browser.
• cwo_remember - set only if you check "Remember Me" at login. Lasts 30 days.

7. Data Retention

• Accounts: Retained until you request deletion.
• Comments: Retained until you delete them or your account is deleted.
• GPU job outputs: Deleted automatically 7 days after job completion.
• Workflow files: Retained in DB for up to 90 days, then deleted.
• Server logs: Retained for up to 30 days.

8. Your Rights

You can update or delete your profile information at any time via Settings. To request full account deletion or a copy of your data, contact us at legal@currentlyworkingon.com. We will process deletion requests within 30 days.

If you are in the European Economic Area, you have additional rights under the GDPR, including the right to access, rectify, and erase your personal data.

9. Contact

Privacy questions or data requests: legal@currentlyworkingon.com