Privacy Policy

WorkloadLab is operated by Sonne Solutions, Ltd. (a Delaware company). This policy explains what we collect, how we use it, and the commitments we make about your data. WorkloadLab is currently in open beta.

The short version: the data you put into WorkloadLab is your company's confidential information. You own it. We do not sell it, we do not share it with anyone beyond the service providers listed below that are needed to run the product, and we do not use it to train machine-learning models.

We understand that your workloads contain commercially sensitive information: your client projects, deadlines, who is working on what, and how you allocate your team. We treat it accordingly.

• You own your data. It remains your company's confidential information at all times.
• We do not sell your data, and we do not share it with third parties for advertising or any purpose other than operating the service.
• We do not use your workload data to train machine-learning or AI models.
• Access is scoped to your account. Each account's workloads are private to that account and are not visible to other customers.

• Account information: your email address, and your name if provided by your sign-in method.
• Workload data: the jobs, tasks, resources (people), durations, deadlines, calendars, and assignments you enter to build and solve a schedule.
• Authentication data: sign-in records and session information needed to keep you logged in securely.
• Basic, privacy-friendly usage analytics (aggregate page views and events). We do not use third-party advertising trackers.

We use your data only to provide and operate the service. Specifically, to:

• Run the optimiser and show you schedules, forecasts, and comparisons.
• Authenticate you and keep your account secure.
• Send transactional email (such as magic sign-in links and support replies).
• Provide support when you contact us, and understand aggregate product usage to improve WorkloadLab.

We use a small number of trusted providers to run the service. They process data only as needed to provide their function to us, and not for their own purposes:

• Hosting: our application and database are hosted on dedicated infrastructure (Hetzner, in Germany).
• Email: Amazon Web Services (Amazon SES) sends transactional email such as sign-in links.
• Sign-in: Google is used as an optional OAuth sign-in provider if you choose to sign in with Google.
• Payments: Stripe processes payments. Card details are handled by Stripe and are not stored by us.
• Analytics: privacy-friendly, self-hosted analytics that records aggregate page views and events. We do not use third-party advertising trackers.

WorkloadLab is multi-tenant: every workload is tied to the account that created it, and access is enforced on the server for every request. One customer cannot read or modify another customer's data. Team-member logins, where used, are restricted to only that person's own assigned task and cannot see the rest of the workload, costs, or other people.

We protect data in transit with TLS and apply reasonable technical and organizational measures to safeguard it. No system is perfectly secure, but we take this seriously and will continue to harden the product through beta and beyond.

We keep your data for as long as your account is active. You can delete individual workloads from within the app at any time, which removes them. To delete your entire account and all associated data, contact us at support@workloadlab.com and we will remove it.

You may request access to, correction of, or deletion of your personal data by contacting us at support@workloadlab.com. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we will honour applicable requests.

As WorkloadLab is in active development, we may update this policy. We will update the date above when we do, and material changes will be communicated where appropriate.

Questions about this policy or your data? Email support@workloadlab.com. See also our Terms of Service.