Privacy policy & earnings disclaimer

Workflow Secrets Company is committed to the lawful, fair, and transparent collection of your data. This policy governs data collection by us and our affiliates (collectively the “Company”) when you purchase or use our products, services, software, and website (collectively the “Services”).

If you do not agree with this policy, you should not use our Services. By accessing or using our Services, you agree to this policy, which may change from time to time. Your continued use after changes are posted is deemed acceptance of those changes.

Our Services are not intended for minors (children under 13 years of age or equivalent depending on jurisdiction). Use of our Services by children is strictly prohibited. We do not knowingly collect personally identifiable information from children. If we learn we have collected personal information from children without verification of parental consent, we will delete that information.

We collect information if you voluntarily provide it — for example when you sign up for SAM, contact us, complete surveys or forms, or carry out transactions through our website.

• Information that may personally identify you, such as name, address, email address, and other contact identifiers;
• Information about you that individually does not identify you;
• Information about how you interact with our websites, such as internet connection or equipment used to access the Services.

This policy does not apply to third-party sites that may link to or be accessible from our site. Your interactions with those sites are governed by the third parties’ privacy statements.

As you interact with our website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns. The information we collect automatically does not include personal information. Technologies may include cookies. You may refuse browser cookies, but some parts of our website may become inaccessible.

We use information we collect to present our Services; provide information, products, or services you request; fulfill purposes for which you provide information; send account and subscription notices; carry out contractual obligations including billing; comply with legal obligations; or for other purposes with your consent.

If you are an EU resident, we collect and use personal data only where we have a legal basis under the GDPR — including consent, legitimate interests, vital interests, or legal obligation.

We may disclose aggregated information that does not identify individuals without restriction. We may disclose personal information to team members, agents, subsidiaries, and affiliates with a business need to know; contractors and service providers who support our business; successors in a merger or asset sale; to fulfill the purpose for which you provide it; as disclosed when you provide information; and with your consent.

We may also disclose personal information to comply with court orders and legal process, enforce our terms, and protect the rights, property, or safety of the Company, our customers, or others.

We may store personal data in regions where we or our service providers have facilities. We implement reasonable processes to protect personal information from accidental loss and unauthorized access, use, alteration, and disclosure.

Transmission of information via the internet is not completely secure. We cannot guarantee security of personal information transmitted to our website. We store personal data only until no longer needed for its purpose or as required by law, then anonymize, delete, or isolate it.

You can request to access, correct, or delete personal information you have provided by contacting mark@workflowsecrets.info. We may not accommodate changes that would violate law or cause information to be incorrect.

If you choose to connect SAM to ChatGPT, Codex, or another supported assistant, you choose the SAM account that connection may use. SAM checks your sign-in, your membership in that account, your permissions, and the access you grant. SAM returns the information produced by the specific SAM tool used for the request, subject to that tool's access controls and limits. A prompt cannot move the connection to a different SAM account.

Tool results can include contact and business records, notes, relationships, dates, communications, calendar items, properties, listings, transactions, and SAM Brain information when you have authorized that capability. Workflow Secrets and the infrastructure providers that host SAM process the request. The AI service you choose to connect receives the SAM information returned for that requested task. That AI service is not a Workflow Secrets subcontractor merely because you connected it. A connected email or messaging provider receives information only when you authorize a supported send.

The connection screen asks for your SAM password so you can sign in. That password is used for sign-in. It is not stored in the connection record and it is not returned to the assistant. Passwords, provider secrets, OAuth credentials, and API keys are not normal SAM tool output.

SAM's connected-AI features are not intended for payment-card data, protected health information, government identifiers, passwords, API keys, or one-time authentication codes. Do not submit those categories through an AI-connected workflow. SAM does not detect or remove those categories from notes or other text already stored in your account.

You can leave SAM updates disabled. You can grant or deny write access and SAM Brain access. You can revoke the connection in SAM. Revoking a connection stops later use immediately. SAM then keeps the revoked connection record for 30 days for security and support, and then deletes it.

• An access token lasts 15 minutes. SAM does not store a copy of it.
• An authorization code can be used for 5 minutes. After a code or refresh token becomes unusable, SAM deletes that credential record 30 days later.
• A refresh token can be valid for up to 30 days.
• SAM keeps a record of MCP activity for 365 days.
• A record used to prevent a repeated write is kept for 24 hours.
• SAM service logs are currently kept for 30 days by the hosting platform.
• A public image prepared for a message is kept for the period you select, from 1 to 365 days, with a default of 30 days, and is then scheduled for deletion. A messaging provider or cache that already fetched it may keep its own copy.

These periods apply to the connection, security, and message-media records described above. Contacts and other business records you store in SAM stay under your normal SAM account and data lifecycle. You can request access, correction, or deletion of personal information you have provided by contacting mark@workflowsecrets.info.

Results vary by individual. Workflow Secrets does not guarantee specific financial, production, or business outcomes from use of our Services, software, coaching, or related offerings. Examples and testimonials are illustrative and not a promise that you will achieve the same results.