Last updated: August 8, 2026. WorkSpeaks, operated by PILOTREACH, a registered business in Ontario, Canada ("we", "us"), provides bilingual video production and social publishing services for local businesses. This policy explains what we collect, why, who we share it with, and the choices you have.
The WorkSpeaks app and service are intended for business owners and operators. You must be at least 18 years old to create an account or use the service. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it promptly; contact us at the address below to report it.
We do not collect precise device location, contact lists, or advertising identifiers, and we do not use third-party advertising or cross-site tracking technologies.
We use a small number of service providers to operate WorkSpeaks and to process your media as part of producing your videos. Each is bound by contract to use your information only to deliver our service to you. We do not sell your information, share it for advertising, or permit it to be used to train models for anyone else.
Your information is stored on cloud infrastructure that may be located outside Canada, and not necessarily in the country where you live. Wherever it is stored, it may be subject to the laws of that jurisdiction; we rely on contractual protections with our providers to safeguard it.
When you connect a TikTok account, we request only the scopes needed to deliver the service: basic profile information (to show you which account is connected), and content posting and listing permissions (to publish videos you approve and to report their performance back to you). We do not read your private messages, your followers, or content you did not create through our service. TikTok data is used solely to operate the features you requested, is never sold or transferred to third parties for advertising, and is not used to train models. OAuth tokens are stored encrypted and deleted immediately when you disconnect the account or delete your account. Our use of TikTok data complies with the TikTok Developer Terms of Service. You may revoke our access at any time in TikTok under Settings → Security and permissions → Manage app permissions.
When you connect a Facebook Page or Instagram professional account, we request only the permissions needed to publish content you approve, to read comments and messages on that content so we can show them to you, and to report performance metrics. We do not access your personal profile, friends, or any content unrelated to the account you connected. Meta data is used solely to operate the features you requested, is never sold or transferred to third parties for advertising, and is not used to train models. OAuth tokens are stored encrypted and deleted immediately when you disconnect the account or delete your account. Our use of Meta data complies with the Meta Platform Terms. You may revoke our access at any time in Facebook under Settings → Apps and Websites. To request deletion of data we obtained through Meta, see Data deletion below.
When you connect a YouTube channel, we request only the scopes needed to upload videos you approve and to report their views and comments back to you. See the section below for how we protect this data and the policies we adhere to.
We apply industry-standard safeguards to protect your information, with particular care for sensitive data such as the OAuth tokens that authorize access to your connected social accounts (including Google/YouTube API Services data):
Our use of Google user data, including any data obtained through YouTube API Services, adheres to the Google API Services User Data Policy, including its Limited Use requirements, and to the Google Privacy Policy.
| Data | How long we keep it |
|---|---|
| Source media and generated videos | While your account is active, and deleted within 30 days of account deletion |
| OAuth tokens | Deleted immediately when you disconnect a platform or delete your account |
| Voice model and voice samples | Until you delete the voice or your account; deleted within 30 days |
| Voice-cloning consent records | Retained as evidence that consent was obtained, for as long as we may need to demonstrate it |
| Contact information and billing records | As long as required by Canadian tax and accounting law |
| Server logs | Kept only as long as needed to operate and secure the service |
You may, at any time:
We respond to these requests within 30 days and do not charge a fee. We will not discriminate against you for exercising any of these rights.
In the app: go to Settings → Delete account. This permanently deletes your generated videos, posters, quotes and invoices, business profile, voice model, OAuth tokens, and account record.
By email: write to [email protected] with the subject "Data Deletion". We will complete deletion within 30 days and confirm in writing.
Disconnecting the app from your Facebook, Instagram, TikTok, or Google settings immediately revokes our publishing access and deletes the stored tokens for that platform. Deletion does not remove content that was already published to your own social accounts — you control that content and can remove it on each platform.
We may update this policy as the service changes. The "Last updated" date at the top always reflects the current version. If we make a material change to how we use your information, we will notify you in the app or by email before it takes effect.
This policy is governed by the laws of the Province of Ontario and the applicable federal laws of Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
PILOTREACH — [email protected]
Ontario, Canada