Privacy policy

Last updated: 24 September 2026

Who is responsible for your information

YULIIA KOVALCHUK, trading as Grokwork AI, is responsible for the personal information processed to operate our service. Address: Via Pio la Torre 15, 50018 Scandicci, Florence, Italy. Email: info@grokworkai.com. Telephone: +39 0444 156 7199.

This policy covers our Grokwork AI store, customer workspace and related purchase and support processes. Separate partner websites have their own privacy policies.

Information we process

We process checkout and account information, including your email, name, billing information, order references, purchased packages, payment status, access periods and credit balances. Our workspace stores a password hash rather than your readable password, and records account activation, sign-in and service activity.

When you use AI generation, we process the text you submit and the generated result. Generated results and usage records are stored to provide your history, account balance and reliable processing. We also process support correspondence and technical information such as IP addresses and request logs for service operation and security.

We receive information directly from you, from Shopify and payment providers when processing orders, and from the referring partner when you initiate a partner purchase. A partner request can include your email and partner order or user reference.

Why we use it

We use purchase, account and submitted content information to perform our contract with you: process purchases, provide access, generate content, send activation and service emails, resolve support requests and handle refunds. Information necessary for checkout, access or a requested generation must be provided for that function to work.

We process records required for accounting and other legal obligations on the basis of those obligations. We process proportionate technical and operational records for our legitimate interests in preventing abuse, protecting accounts, resolving disputes and maintaining a reliable service. Where consent is required for optional cookies or marketing, that processing relies on your consent, which you may withdraw.

Service providers and partner purchases

Shopify operates our store and checkout. Payment providers process payments; complete card numbers and security codes are not stored in our customer workspace. Hosting, email and operational service providers process information needed to run and support the service. Our transactional email uses Private Email.

AI generation uses the OpenAI API. The text submitted for generation is transmitted to OpenAI to produce a response. Do not enter sensitive personal information, passwords, payment details or confidential information you are not authorised to share.

For a purchase initiated through a partner, we send that partner a payment status notification containing transaction and order references, the amount, currency and status, and the partner user reference where provided. This allows the partner to associate the payment with its request. We do not include your prompts or generated content in that payment notification.

We may also disclose information where legally required or necessary to establish, exercise or defend legal claims.

International processing

Our providers may process information outside your country, including outside the European Economic Area. Where GDPR transfer requirements apply, transfers require an applicable adequacy decision or appropriate safeguards, such as approved standard contractual clauses. Contact us for information about the arrangements relevant to your data.

How long information is kept

Account, purchase entitlement and generation records are retained to operate your account, provide purchased access and generation history, and resolve related enquiries. Retention depends on whether your account and purchases remain active, whether you request deletion, and whether records are still needed for security, outstanding disputes or legal obligations. Accounting and transaction records may need to be retained after account closure for the applicable statutory period.

You can request account closure and deletion by email. We will explain any information that must be retained and the reason. Deletion may remove access to saved content and affect the ability to use remaining purchases.

Cookies

The workspace uses a session cookie to keep you signed in. Shopify may use cookies and similar technologies for checkout, security and other store functions. Where optional cookies are offered, use the available cookie controls to manage your choices. Browser settings can also block cookies, but this may prevent sign-in or checkout from working.

Your rights

Where applicable, you may request access, correction, erasure, restriction or portability of your personal information, and object to processing based on legitimate interests. You can withdraw consent without affecting the lawfulness of earlier consent-based processing. Some rights are subject to legal conditions.

Contact info@grokworkai.com to make a request. We may need to verify your identity. You may complain to your local data protection authority; in Italy, this is the Garante per la protezione dei dati personali.

Changes

We may update this policy as the service changes. The latest version will show its update date. Material changes affecting your information will be communicated as required by applicable law.