JustWork Privacy Policy
This policy applies to the JustWork Chrome extension, web app, website, and JustWork Backend (the “JustWork Services”).
Chrome extension ID: fhplelioofjbochfoogomboajhalcehl
1. Information we process
To provide synchronization and collaboration, JustWork processes workspace identifiers, user-created documents, tables, boards, files and images, collaboration updates, and content structure and activity history. Workspace snapshots and collaboration data are encrypted at rest, while the backend can process readable content during authorized requests and collaboration.
The extension and web app store workspace lists, preferences, a locally generated user identifier, member nicknames, Inbox notifications, offline drafts, pending operations, and collaboration snapshots locally. A workspace password is stored locally only when you choose to remember it. When you create, unlock, or use a remote workspace, the password is sent over HTTPS to authorize operations and encrypt or decrypt workspace data.
Cloudflare and other infrastructure may process IP addresses, timestamps, User-Agent information, errors, and security logs. Vercel provides static hosting for this policy page and does not receive core workspace content through this page. Stripe processes payments for paid workspaces; JustWork receives only the payment details needed to fulfil an order. User-selected PostgreSQL providers store workspace data only when a paid user actively configures them.
2. Encryption and passwords
JustWork uses HTTPS/WSS for transport and password-derived encryption for stored workspace payloads and collaboration data. The backend receives the workspace password for authorized requests, decrypts content to perform requested operations, and processes readable collaboration updates. It may hold derived collaboration keys in memory while serving a workspace. The plaintext password is not stored in the backend database and cannot be recovered.
The current remote service is not end-to-end encrypted against the backend. The backend can access content while providing synchronization and collaboration.
3. Why we process and share information
- Create, unlock, synchronize, and display workspaces.
- Support real-time collaboration, agent actions, history, recovery, quotas, and security.
- Process payment status and optional custom-database routing.
- Share workspace data and member information only with authorized members and agents of that workspace.
We do not sell personal information or use or transfer it for advertising, unrelated purposes, or credit decisions.
4. Extension permissions
The Chrome extension requests storage and access to https://justworkapi.txzy.net/* to store workspace state and communicate with JustWork. It does not access browser history or cookies, read arbitrary websites, or inject tracking scripts.
5. Retention, security, and contact
Data is retained while needed to provide workspaces, history, and security. You can clear local browser data, delete content, stop using the service, or request deletion. Removing the extension or local browser data does not delete remote workspace data. Permanently deleted content may remain in limited backups or logs until rotation.
We use encrypted storage, access controls, write verification, and infrastructure safeguards, but no online service can guarantee absolute security. This policy may be updated at this URL with a revised date.
For privacy questions, deletion requests, or suspected security issues, email uizorrot@gmail.com. Do not send passwords or private workspace content by email.
JustWork 隐私政策
本政策适用于 JustWork Chrome 扩展、在线版、官网以及 JustWork Backend（合称“JustWork 服务”）。
Chrome 扩展 ID：fhplelioofjbochfoogomboajhalcehl
1. 我们处理的信息
为提供同步与协作，JustWork 会处理工作区标识、用户创建的文档、表格、看板、文件和图片、协作更新，以及内容结构和活动历史所需的数据。工作区快照和协作数据采用加密存储，但后端在授权请求与协作期间可以处理可读内容。
扩展和在线版会在本地保存工作区列表、偏好、本地生成的用户标识、成员昵称、Inbox 通知、离线草稿、待同步操作和协作快照。只有你主动选择记住密码时，工作区密码才会保存在本地。创建、解锁或使用远程工作区时，密码会通过 HTTPS 发送给后端，用于授权操作和加解密工作区数据。
Cloudflare 等基础设施可能处理 IP 地址、时间、User-Agent、错误和安全日志。Vercel 仅为本隐私政策页提供静态托管，不通过该页面接收核心工作区内容。付费工作区的付款由 Stripe 处理；JustWork 只接收履行订单所需的信息。仅在付费用户主动配置时，用户指定的 PostgreSQL 提供商会存放工作区数据。
2. 加密与密码
JustWork 使用 HTTPS/WSS 保护传输，并使用由工作区密码派生的密钥加密存储工作区载荷与协作数据。后端会在授权请求中接收密码，解密内容以完成请求的操作，并处理可读的协作更新。提供服务期间，派生的协作密钥可能保留在服务端内存中。工作区明文密码不持久化到后端数据库，且不能恢复。
当前远程服务不提供对后端不可见的端到端加密。 后端在提供同步与协作服务时可以访问内容。
3. 处理、共享与广告
我们处理信息以创建、解锁、同步和展示工作区，支持实时协作、Agent 操作、历史、恢复、配额与安全。工作空间数据和成员信息只会为协作目的提供给该工作空间的获授权成员和代理。我们不会出售个人信息，也不会将其用于或转移给广告、无关用途或信贷决策。
4. 扩展权限
Chrome 扩展请求 storage 以及 https://justworkapi.txzy.net/* 的访问权限，用于保存工作空间状态并与 JustWork 服务通信。它不会访问浏览历史或 Cookie、读取任意网站，也不会注入跟踪脚本。
5. 保留、安全与联系
数据会在提供工作区、历史和安全保障所需期间保留。你可以清除本地浏览器数据、删除内容、停止使用服务，或请求删除。卸载扩展或清除本地浏览器数据不会删除远程工作区数据；彻底删除的内容可能在有限期限内保留于备份或日志中，直至轮换完成。
我们使用加密存储、访问控制、写入校验和基础设施安全措施降低风险，但任何在线服务都无法保证绝对安全。政策更新后会在本页公布并更新日期。
隐私、删除请求或疑似安全问题请联系 uizorrot@gmail.com；请勿通过邮件发送密码或私密工作空间内容。