This Privacy Policy describes how Reportworq LLC ("Reportworq," "we," "our," or "us") collects, uses, discloses, and protects information obtained through:
This policy also covers our Microsoft 365 marketplace apps: Reportworq Connect, the Reportworq add-in for Microsoft Excel and Microsoft PowerPoint, and Worq, the Reportworq agent for Microsoft 365 Copilot. Data handling specific to those apps is described in sections 7 and 8.
This Privacy Policy does not replace or modify any separate contractual agreements governing licensed Reportworq software products or enterprise customer relationships.
By accessing or using the Services, you acknowledge the practices described in this Privacy Policy.
We may collect information you voluntarily provide, including when you:
Information may include:
When you access the Services, we may automatically collect certain technical and usage information, including:
We may use log files, analytics tools, cookies, and similar technologies to collect this information.
We may use cookies, local storage, web beacons, and related technologies to:
Most browsers allow you to control or disable cookies through browser settings. Certain functionality may not operate properly if cookies are disabled.
We may use collected information to:
We may also use aggregated or anonymized information for analytics, reporting, operational insights, and product improvement purposes.
Reportworq primarily provides enterprise software deployed within customer-managed or customer-controlled environments.
Customer data processed through licensed Reportworq software products remains subject to applicable customer agreements, including subscription agreements, license agreements, statements of work, or other contractual terms.
Except as otherwise agreed in writing:
Because many Reportworq deployments operate within customer-managed infrastructure, customers may independently control storage locations, security configurations, access policies, backups, and retention practices.
Certain current or future features may incorporate artificial intelligence, machine learning, automation, or large language model technologies.
Where applicable:
Unless expressly authorized in writing, Reportworq does not intentionally use Customer confidential information submitted through licensed products to train public AI models.
Reportworq does not sell personal information.
We may share information:
Service providers are generally authorized to access information only as necessary to perform services on our behalf.
Information posted in forums, community discussions, or other public areas may become publicly accessible.
You should avoid posting confidential, sensitive, regulated, or proprietary information in public-facing areas of the Services.
Reportworq is not responsible for how third parties use information voluntarily disclosed in public forums.
Reportworq Connect is a Microsoft 365 add-in (task pane and RW. custom functions) that connects Excel and PowerPoint to the Reportworq server operated by your own organization.
The add-in exchanges report data, parameter selections, and the workbook or presentation content you are working with directly between your Microsoft 365 application and the Reportworq server that your organization operates (the server address your administrator configures). You authenticate to that server through your organization's identity provider (for example, Microsoft Entra ID). Reportworq does not receive, view, or store your report content through the add-in; that content flows between your device and your organization's own server.
Optional AI features. The add-in has two optional features that use an AI provider. The RW.TOOLS.AIINSIGHT worksheet function sends the prompt and the data range that the workbook author chooses. Create with AI, in the chart builder, sends the chart type and up to 12 rows of the data you have selected. In both cases the data is sent by your organization's Reportworq server to the AI provider that your organization's Reportworq administrator has configured, and only when the feature is used. If no AI connection is configured, nothing is sent to an AI provider.
We host the add-in's static web files (HTML, JavaScript, CSS, and icons) on Microsoft Azure so Microsoft 365 can load the add-in. These files contain no customer report data. Serving them may generate standard web-server request logs (such as IP address, timestamp, and browser type) used for security, reliability, and abuse prevention; these logs do not contain your report content.
Third parties involved: Microsoft, as the provider of Microsoft 365 and the Office add-in platform, and, if your organization uses the optional AI features, the AI provider your organization has configured. We do not sell your data or share it with third parties for advertising.
Worq lets you find, preview, and email the reports you can access on the Reportworq server operated by your own organization, from within Microsoft 365 Copilot and Microsoft Teams, using the Model Context Protocol (MCP).
When you ask Worq for a report, your request and the resulting report output are relayed between Microsoft 365 Copilot and your organization's Reportworq server. Your Microsoft sign-in token is passed through so that your organization's server can verify your identity and return only the reports your Reportworq permissions allow. Report content is produced by, and governed by, your organization's own server. Microsoft 365 Copilot uses the report content returned to it to write its answers, under Microsoft's terms. When you ask Worq to email a report, your organization's server sends it only after you confirm the request in Copilot.
The relay we operate (at api.reportworq.com) routes each request to the correct organization's Reportworq server based on your sign-in token's issuing tenant. It is a pass-through relay: it does not store your report content, your sign-in token, or the content of requests and responses. The state of a request in progress is held in memory and discarded automatically within 20 minutes.
For reliability, security, and support, the relay records one operational event per request in Microsoft Azure Monitor (Application Insights). Each event contains the issuer and tenant ID of your sign-in token, your user name as it appears in the token (your user principal name or email address), shortened one-way hashes of your organization's routing and license keys, the request and response sizes, the outcome, and, when a request fails, a short error message returned by your organization's server. When your organization's Reportworq server connects to the relay, the relay also records that server's IP address and client type. These events are kept for 90 days and then deleted. They do not contain your report content or your sign-in token.
Third parties involved: Microsoft, as the provider of Microsoft 365 Copilot, Microsoft Teams, Microsoft Entra ID (identity), and Azure Monitor (where the relay's operational events are stored). We do not sell your data or share it with third parties for advertising.
We retain personal information for as long as reasonably necessary to:
Retention periods may vary depending on the nature of the information and applicable legal or operational requirements.
Reportworq maintains commercially reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.
Security measures may include:
No system or method of transmission is completely secure, and Reportworq cannot guarantee absolute security.
Users are responsible for:
Reportworq operates primarily within the United States.
Information may be processed, transferred, or stored in the United States or other jurisdictions where Reportworq or its service providers operate.
By using the Services, you acknowledge that information may be transferred to jurisdictions with different data protection laws than your country of residence.
Depending on applicable law, you may have rights regarding your personal information, including rights to:
You may also opt out of marketing communications using unsubscribe links contained in emails.
To exercise applicable rights, contact us using the information below.
The Services are not directed to children under 13 years of age, and Reportworq does not knowingly collect personal information from children.
If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information.
The Services may contain links to third-party websites, software, integrations, or services.
Reportworq does not control and is not responsible for third-party privacy practices, policies, or content.
We encourage users to review applicable third-party privacy policies.
Reportworq may update this Privacy Policy from time to time.
Updated versions will become effective upon posting unless otherwise specified.
Your continued use of the Services following updates constitutes acceptance of the revised Privacy Policy.
Reportworq LLC
20 N Wacker Dr.
Chicago, Illinois 60606
United States
Website: reportworq.com
Contact Us