This privacy policy (the “Policy”) describes the treatment of information provided or collected on the website, www.workonreferrals.com (the “Site”), and on its associated software applications and integrations (including the Work on Referrals MCP server and any Anthropic Claude connector exposing Work on Referrals functionality) where this Policy is posted. The purpose of this Policy is to describe how Work on Referrals, Inc. (“WOR,” “we,” or “us”) collects, shares, and secures information provided by you. Before you provide us with any personally identifying information, you should read this Policy in its entirety. We may update the Policy from time to time, so please check in occasionally.
This Policy covers:
We collect only information that is reasonably necessary to facilitate and optimize the Site and the activities available on it. We do not collect, access, store, or use any user-context, conversation, chat, prompt, message, or other interaction content, including Claude memory, chat history, conversation summaries, or user-generated or uploaded files, except (a) to the extent strictly necessary to provide the specific Site functionality requested by the user, or (b) where the user has turned on the User MCP Activity Log (defined below) and then invokes the Anthropic Claude connector or the Work on Referrals MCP server, in which case we record the tool queries the user submits and the tool responses we return so the user can review, search, export, and delete that history from within their own account. The User MCP Activity Log is stored solely for the user’s own retrieval. It is never used for analytics, logging beyond the user’s view, marketing, advertising, product improvement, or training of AI models. See Section 3 for full treatment.
On the Site, you may choose to provide WOR with certain information about yourself which can be “personally identifiable information” or “personally identifying information.” You may choose not to submit such personally identifiable information, but you will not be able to create an account or purchase anything on the Site. The term “personally identifiable information” means information that is collected in connection with your name, such as your address, email, phone number, and credit card information. We do not store any credit card information provided on the Site, so you will need to reenter any such credit card information each time you are required to purchase a product or service on the Site.
When you use the Site, we may also collect and store certain non-personally identifiable information automatically through the Site’s standard server logs only to the extent necessary to provide, secure, troubleshoot, and maintain the Site and its functionality. We do not collect or retain user-context, conversation, chat, prompt, message, or other interaction content through server logs for analytics, logging, marketing, advertising, or product-improvement purposes. Server-log information may include:
There are various ways in which we collect your information, both personally identifying information and non-personally identifying information.
We collect information you provide when you fill out the Contact Us form, request services, products, or information from us, create an account, participate in public forums, or engage in other activities on the Site or platforms that permit us to interact directly with you.
We may use common Site tracking technologies, including cookies, pixels, and tags, on the marketing portions of the Site only. These technologies allow WOR to track how you use the marketing Site and store your preferences. No personally identifiable information is stored in a WOR cookie. You may set your browser to refuse cookies, though some portions of the Site may not function properly. WOR does not use cookies, web beacons, pixels, tags, or similar tracking technologies to collect or retain user-context, conversation, chat, prompt, message, generated report content, or other interaction content, including content accessed via the Anthropic Claude connector or any MCP interface. For more information about cookies, please visit www.allaboutcookies.org.
Some web browsers may transmit Do Not Track (DNT) signals. Because of differences in how browsers implement this feature, it is not always clear whether users intend for these signals to be transmitted. We currently do not change our tracking practices in response to DNT settings, and we do not obligate our third-party partners to do so.
On the marketing portions of the Site, we may utilize Google Analytics and similar analytics services to track aggregate traffic patterns and to improve the Site. Third parties advertising on the Site may also use tracking technologies. WOR does not control third-party tracking. Third-party tracking does not extend to, and is not used in connection with, the Anthropic Claude connector, the WOR MCP server, or any AI-assistant integration.
Notwithstanding any other provision of this Policy, data accessed by WOR through the Anthropic Claude connector, any MCP server, or any AI-assistant integration is processed solely to fulfill the user’s in-session request, is never sold or shared for cross-context behavioral advertising, and is never used for advertising, marketing, third-party analytics, training of AI models, or product improvement. WOR does not query or store Claude memory, chat history, conversation summaries, or user-uploaded files except to the extent strictly necessary to perform the specific function the user has requested in that session.
When the user invokes a tool through the Anthropic Claude connector or the WOR MCP server, WOR records and retains, on the user’s behalf, (i) the tool name and parameters the user submitted, (ii) the response WOR’s MCP server returned, and (iii) the timestamp of the call (collectively, the “User MCP Activity Log”).
Stated feature, not extraneous logging. The User MCP Activity Log is a stated user-facing feature of the WOR connector, not server-side or analytics logging. WOR collects the data described above only because presenting that data back to the user is itself the feature. WOR has no use for the log other than displaying it to the user.
Opt-in and user control. The User MCP Activity Log is off by default. WOR does not record any connector activity unless the user turns the log on from account settings. When the log is on, WOR records new entries. When the log is off, WOR records no new entries and the user sees only the entries already saved. The user may turn the log on or off at any time. The user may delete any single entry or the entire log at any time. Deletion cannot be undone.
Storage and access. The User MCP Activity Log is associated with the user’s WOR account, encrypted at rest, and stored on WOR-controlled infrastructure. Access is limited to (a) the user, (b) WOR personnel only when the user has opened a support ticket or otherwise documented a request requiring access, and (c) as required by law. The log is never sold, never shared for cross-context behavioral advertising, and never used for marketing, third-party analytics, product improvement, or AI-model training.
Anthropic’s role. Anthropic acts as a processor only for the in-session conversation with Claude. Anthropic does not store the User MCP Activity Log and is not a processor of it. The log resides solely on WOR infrastructure.
Retention defaults are described in Section 10. User controls are described in Section 11.
You may access third-party content through the Site and navigate to third-party websites. Whether third-party content appears within the Site (such as in an embedded audio or video player) or you leave the Site to view content on another website, the third party is in control of and independently produces, maintains, and monitors the content. You are subject to that third party’s terms of use and privacy policies. We do not accept any responsibility or liability for the privacy practices of third parties.
We may use information you voluntarily provide on the Site for the following purposes:
We do not use data accessed through the Anthropic Claude connector or any MCP interface for any of the above secondary purposes. Such data is used solely (a) to deliver the in-session output the user has requested and (b) to populate the User MCP Activity Log described in Section 3 for the user’s own retrieval. We never use connector data, MCP data, or the User MCP Activity Log for advertising, marketing, third-party analytics, product improvement, or AI-model training.
Except as expressly set forth in this Policy, we will not willfully disclose your personally identifiable information to any third party without first receiving your permission, and we will never sell, share, or exchange your personally identifiable information with non-affiliated third parties for their own purposes. We share customer information only as set forth below and with subsidiaries or a parent company subject to this Policy or practices at least as restrictive.
On the Site, you have the right to choose other Site users with whom to share generated reports and other Site functionality. Upon such a request, we will share content that may contain personally identifiable information. You have the right to anonymize such content or delete the share request at any time.
We may share information with third-party companies or individuals that provide us with services. See Section 7 for the categories of service providers and subprocessors we use.
In the event that we, or any portion of our assets, are acquired or we undergo another transaction in our business, your personally identifying information may be transferred to the acquiring company or other surviving entity.
We may share your personally identifying information with another company when you allow us to, such as when you elect to share your information for offers and promotions, or when you direct us to share your information with third-party sites or platforms (e.g., social networking sites).
We may report to law enforcement agencies any activities we reasonably believe to be unlawful, or that we reasonably believe may aid a law enforcement investigation into unlawful activity. We may share your information as required or permitted by law, including in response to subpoenas, court orders, or other legal process, or to exercise or defend legal rights or claims.
We may allow users to communicate with each other via the Site in posts or comment sections. Information you submit there may be available to the public and may be read, collected, and used by others.
We use the following categories of service providers, each bound by contract to handle your information only as needed to provide their service and consistent with this Policy:
A current list with links to each provider’s privacy policy is available at www.workonreferrals.com/subprocessors and will be updated as providers change. None of these service providers receive data accessed through the Anthropic Claude connector or any MCP interface other than the hosting infrastructure required to operate the MCP server itself.
If you are a California resident, you have the right to (a) know what personal information we collect, use, disclose, and sell or share; (b) request deletion of personal information we collected from you; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of personal information; (e) limit use of sensitive personal information; and (f) not be discriminated against for exercising these rights. We do not sell personal information and do not share personal information for cross-context behavioral advertising.
Categories of personal information collected in the past 12 months:
Sources: directly from you, automatically from your device on the marketing Site, and from service providers listed in Section 7. Purposes: to operate the Site, provide requested services, comply with law, and prevent fraud. Recipients: service providers under written contract, and third parties as described in Section 6.
To exercise any right, email privacy@workonreferrals.com or write to the address in Section 15. You may use an authorized agent (proof of authorization required). We will verify your identity before responding and will respond within 45 days, with a possible 45-day extension if reasonably necessary.
If you are located in the European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and UK GDPR apply to our processing of your personal data.
Controller: Work on Referrals, Inc., 5716 Corsa Avenue, Suite 110, Westlake Village, California 91362, United States.
Legal bases for processing:
Your rights:
International transfers: where we transfer personal data outside the EEA, United Kingdom, or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism. To exercise any right, email privacy@workonreferrals.com.
We retain personal information for as long as your account is active, as needed to provide you with services, and as required to comply with legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed for these purposes, we delete or de-identify it. Specific retention periods vary by data category and applicable law; contact privacy@workonreferrals.com for category-specific detail. Data accessed through the Anthropic Claude connector or any MCP interface is not retained beyond the session except (a) as strictly necessary to deliver the requested output to the user, and (b) where the user has turned on the User MCP Activity Log described in Section 3, as part of that log. The log is retained for the life of the user’s account or until the user deletes individual entries or the entire log, whichever occurs first. Turning the log off stops new recording but does not delete entries already saved; the user must delete those entries to remove them. The User MCP Activity Log is purged within 30 days of account closure, except where retention is required by law.
We provide you with the ability to exercise certain controls and choices regarding our collection, use, and sharing of your information. In accordance with applicable law, your controls and choices include:
You may exercise these rights by contacting us per Section 15, by updating your user profile, or by following instructions in communications sent to you. If you do not allow us to collect personally identifying information from you, we may not be able to deliver certain Site functionality.
The security, integrity, and confidentiality of your information are extremely important to us. WOR maintains administrative, technical, and physical safeguards, consistent with legal requirements where the personally identifying information was obtained, designed to protect against unlawful or unauthorized destruction, loss, alteration, use, or disclosure of, or access to, the personally identifying information provided to us. WOR stores your information using reasonable security precautions. The Site uses industry-standard Transport Layer Security (TLS) to encrypt personal data in transit. No transmission of data is guaranteed to be completely secure; it may be possible for third parties to unlawfully intercept transmissions. Use of Site information outside of the Site, such as at in-person networking events, is not controlled by WOR, and WOR expressly disclaims any liability arising from the use or sharing of such information in such settings.
The Site is not directed to children under 16. We do not knowingly collect personally identifying information from children under 13 without verifiable parental consent, and we do not knowingly collect personal information from children between 13 and 16 in the EEA or United Kingdom without parental consent. If we learn that we have collected such information, we will delete it within 30 days. Parents or guardians who believe their child has provided us with personal information may contact privacy@workonreferrals.com to request deletion. We encourage parents and guardians of minors to regularly check and monitor their children’s use of email and other activities online.
By using the Site, you agree to the terms of this Policy. If you do not agree, please do not use the Site. We reserve the right, in our sole discretion, to change, modify, add, or remove portions of this Policy at any time. We will indicate at the top of this Policy when it was most recently updated. Your continued use of the Site following any changes shall signify your acceptance of those changes.
If you have any questions or comments about this Policy, or if you would like us to update information we have about you or your preferences, or if you would like to exercise any applicable data-protection right, please contact us via email at privacy@workonreferrals.com (or contact@workonreferrals.com for general inquiries) or write to us at:
Attn: Compliance Manager
Work on Referrals, Inc.
5716 Corsa Avenue, Suite 110
Westlake Village, California 91362
