How PWG handles information.
1. Scope
This notice applies to Principal Works Group website visitors, prospective clients, client contacts, authenticated client-workspace users and people who submit engagement information to PWG. A signed agreement, data-processing agreement or engagement-specific privacy term may add to or override this notice for a particular engagement.
2. Information PWG may collect
- Contact information such as name, business email, role, organization and phone number when provided.
- Engagement discovery information, including problem statements, desired outcomes, scope, constraints, timing, systems, stakeholders and security requirements.
- Commercial records such as quotes, concessions, acceptance timestamps and engagement status.
- Workspace and delivery information made available through authenticated client areas.
- Technical information ordinarily generated by web infrastructure, such as request metadata, security logs and browser/network information.
3. How PWG uses information
PWG uses information to respond to inquiries, understand and scope potential work, prepare and administer engagements, provide authenticated client services, issue and manage quotes, maintain business and audit records, secure the service and improve PWG's operating processes.
4. AI-assisted discovery
PWG's conversational discovery flow can use an AI-assisted mode. In that mode, the browser sends conversation text and accumulated structured discovery state to a PWG server-side function, which may send that text to OpenAI for a response. The current implementation does not upload the audio itself. A non-AI guided fallback remains available when the AI service is unavailable.
Do not submit passwords, credentials, payment-card numbers, government identifiers, health records, trade secrets unnecessary for discovery or other information that PWG has not asked for. Engagement-specific AI restrictions shown in the Client Command Center control over PWG's general default for that engagement.
5. Service providers
PWG uses service providers to operate the website and engagement system. Current providers include Cloudflare for website delivery and serverless functions, Supabase for authenticated engagement data and workspace services, and OpenAI when AI-assisted discovery is used. PWG may change providers as systems evolve and will not represent an engagement-specific restriction as satisfied unless the relevant architecture supports it.
6. Sale, targeted advertising and model training
PWG does not sell personal information and does not use engagement information for targeted advertising. PWG's default engagement protection profile does not authorize client material for model training by PWG. Any engagement-specific exception must be made explicit.
7. Retention
Retention depends on the nature of the information, the engagement, legal and accounting needs, security requirements and any written client commitment. The default engagement profile is “engagement-specific”; PWG does not promise an automatic deletion period unless one is expressly recorded for the engagement.
8. Security
PWG uses authenticated workspaces, tenant-scoped access controls, server-side secrets for protected integrations and audit records for important commercial state changes. No internet service is risk-free, and PWG does not claim a certification or control that has not been independently established.
9. Your choices and requests
You may contact PWG to ask about access, correction or deletion of personal information associated with you, subject to applicable law, contractual obligations and records PWG must retain. If applicable law provides additional rights, PWG will respond consistent with those obligations.
Requests may be sent to [email protected]. PWG may need to verify identity before acting on a request.
10. Changes
PWG may update this notice as its services, providers or legal obligations change. The effective date and version above identify the notice currently published. For an accepted engagement, the policy version recorded at acceptance remains part of the engagement evidence.