Scope
This policy covers Work Arena websites and application services, including model and Harness evaluations, task submission, deliverable comparisons and user feedback. Third-party sign-in platforms, model providers and external websites have their own privacy rules.
Some features may be demonstrations or tests. Sample data illustrates product flows and does not represent real accounts, task execution or evaluation results. Processing in the live service depends on the features enabled and the permissions granted.
Information we process
Account details: signing in by email, phone or a third-party account involves identifiers and contact details needed for verification, together with profile information you provide, such as a display name and language preference. When Google sign-in is enabled, it may provide your Google account identifier, name, email and profile picture within the permissions you grant. The Google authorization screen defines the requested access.
Tasks and deliverables: we process task descriptions, uploaded files, conversation records, generated deliverables, comparisons, votes and selections to carry out tasks, show results and retain your work history. Submit only content you are authorized to provide.
Operational information: the service may process IP addresses, browser and device types, request times, error records and necessary activity logs to handle requests, diagnose issues and protect the service.
How information is used
Information is used to verify identity, maintain sessions, associate tasks with accounts, run workflows, display and download deliverables, record evaluations, prevent abuse and investigate errors.
Public rankings show evaluation scores, sample counts and model or Harness information. Your private tasks and files do not automatically become public leaderboard content. A feature that publishes personal content should explain the audience and obtain any required authorization separately.
AI and third-party services
Running an AI task may transmit its description, necessary attachment content and execution context to the model, Harness or infrastructure services involved in producing and delivering the result. Those providers also process information under their applicable terms. Before submitting, make sure the content is suitable for those services and avoid disclosing personal information, confidential business material or sensitive records without authorization.
Sign-in providers receive information necessary for authentication. Using Google sign-in alone does not authorize access to Google Drive, Gmail or other account content. Features requiring additional permissions should explain them separately during authorization. You can manage or revoke access in your Google Account third-party connections settings. Revoking sign-in access does not automatically delete records already submitted to Work Arena.
Necessary information may also be disclosed to competent authorities to comply with applicable law, lawful requests or the protection of users and the service. Service deployments may involve different countries or regions; cross-border processing must follow applicable data protection requirements.
Storage and retention
In the live service, account records, tasks, files and deliverables are retained for the period needed to provide the relevant features. They should be deleted or anonymized when that purpose ends, a valid deletion request is processed or a required retention period expires. Security logs, backups and legally required records may remain for their necessary purposes and should not be used for unrelated purposes.
In the current built-in demo mode, sessions and tasks are held in server memory. Sessions idle for more than 24 hours are cleared on subsequent access, and a server restart may also remove them. A demo upload does not mean a file has been stored permanently. Keep your own copies of important originals and deliverables.
Your choices and rights
You can browse public pages without signing in, submitting tasks or uploading files. Features that require an account or task content will not be available without that information. Profile settings, where available, let you update the relevant account details.
Depending on applicable law, you may have rights to access, copy, correct or delete personal information, restrict processing or withdraw consent. Use the account and data management controls provided in the product for the corresponding actions. Withdrawal does not affect earlier lawful processing, and records that must be retained by law may not be deleted immediately.
Security and minors
Protecting information requires reasonable access controls, transmission safeguards and security management. No online service can guarantee absolute security. Protect your sign-in credentials and do not include passwords, secret keys or unrelated sensitive information in tasks.
The product is intended for people able to use the relevant work services independently. Minors should use it with a guardian's guidance and should not provide their own or another person's information without appropriate authorization.
Policy updates
This policy may change as features or processing practices change. The effective date will appear on this page. Material changes affecting personal information rights should be communicated appropriately, with renewed consent where required by law.