Privacy policy
What personal data Dock collects, why, who processes it, how long we keep it and the rights you have.
Last updated: 16 October 2026. Dock is provided by BobOffice, LLC.

Who we are
Dock is a team workspace (chat, meetings, docs, tables, calendar, tasks and files) run at dock.bobwork.ai and in the Dock desktop app. It is provided by BobOffice, LLC, a Delaware limited liability company ("we", "us"). This policy explains what personal data we handle when you use Dock or visit this website, why, and the choices you have.
Dock is built for businesses. A workspace is set up by an organisation (the "customer"), and its administrators decide who joins and how the workspace is used. For the content people put into a workspace, we act on the customer's instructions (as a "processor" or "service provider"). For account, security and website data, we decide how it is used (as a "controller").
Data we collect
- Account data: your name, username, email address, profile photo and job title if you add them, and a hashed password (we never store your password in plain text). If you sign in with Google, we receive your Google email address and name.
- Workspace content: messages, files, images, documents, sheets, slides, whiteboards, calendar events, tasks, forms and anything else you or your colleagues put into Dock.
- Meeting data: who joined a call and when. If the host turns on recording, captions, transcription or live translation, the recording, audio and resulting text are stored in the workspace.
- Integration data: if you connect GitHub, Notion, Claude (Anthropic) or WhatsApp (through a WhatsApp messaging provider), we store the access tokens (encrypted) and the data you choose to bring into Dock.
- Technical and security data: IP address, browser or device type, sign-in times, the list of your signed-in devices, an audit log of administrative and security actions, and server logs.
- Messages to us: if you email us, we keep the email and our reply.
How we use it
- To provide Dock: create your account, run your workspace, deliver messages and calls, store files and show your content to the people you share it with.
- To keep Dock secure: verify email addresses, stop spam and abuse, block automated sign-ups, enforce limits, investigate reports and keep an audit trail.
- To run optional features you or your workspace turn on, such as translation, transcription, summaries, recordings and integrations.
- To send service emails, such as verification codes, password resets, invitations and important notices.
- To answer your questions and requests.
- To meet legal obligations.
We do not sell personal data. We do not use your workspace content for advertising.
Legal bases (EU and UK users)
Where the GDPR or UK GDPR applies, we rely on: contract (to provide the service you or your organisation signed up for); legitimate interests (to keep Dock secure, prevent abuse and improve reliability, balanced against your rights); consent (where we ask for it, which you can withdraw at any time); and legal obligation (where the law requires us to keep or disclose data).
Service providers we use
| Provider | What it does for Dock | Where data is processed |
|---|---|---|
| Render | Hosts the Dock servers and database | Singapore |
| Cloudflare | DNS for our domain, and Turnstile, a check on the sign-up form that tells people from bots | Global network |
| OpenAI | Translation, transcription and other AI features you use, such as summaries | United States |
| LiveKit | Carries audio and video for meetings | LiveKit servers, which may be outside your country |
| Resend | Sends service emails, such as verification codes and invitations | United States |
| Google (Firebase Cloud Messaging) | Delivers push notifications to the Dock mobile apps: a device token and the notification text (only if you use a Dock mobile app) | United States and other countries where Google operates |
| Stripe | Takes payments for paid plans: billing name, email, address, card details and payment history (only if you buy a paid plan) | United States and other countries where Stripe operates |
| GitHub, Notion, Anthropic (Claude) | Only if you connect them: exchange data with those services at your request | United States |
| WhatsApp messaging provider | WhatsApp messaging, only when a workspace connects WhatsApp; the provider relays messages to and from WhatsApp (Meta Platforms) | the provider's and WhatsApp (Meta Platforms) servers, which may be outside your country |
OpenAI does not use data sent through its API to train models by default, per its API data usage policy. Each provider handles data under its own terms and only for the purpose above. If you turn on browser push notifications, your browser's push service (for example Apple, Google or Mozilla) delivers them. We will update this list when we add or change a provider.
International transfers
Dock is hosted in Singapore, and some providers process data in the United States or elsewhere. When we transfer personal data from the EU, UK or other places with transfer rules, we rely on the safeguards the law provides, such as the providers' standard contractual clauses or equivalent terms.
How long we keep data
We keep your data while your account or workspace is active. Workspace administrators can delete content, and members can delete their own messages and files where the workspace allows it.
When an account or workspace is deleted, we delete its data from the live service within 30 days. Copies in our encrypted backups roll off within a limited period after that. We may keep a small amount of data for longer where the law requires it, or to deal with abuse, fraud or a legal claim (for example a record that an account was banned).
Delete your account
To delete your Dock account: in the Dock app or at dock.bobwork.ai, tap your avatar > View and edit profile > Security > Request account deletion, and an admin of your workspace approves it. If you cannot sign in, are the only admin, or nobody acts within 7 days, email info@bobwork.ai from the email address on the account; we confirm by email and delete it. Your name and contact details are erased, and remaining personal data is removed from the live service within 30 days (backups roll off within a limited period). Messages you wrote stay in their chats under "Deleted user" unless an admin removes them. Full steps: dock.bobwork.ai/p/delete-account.html.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict some uses, and to withdraw consent. You can change most account details yourself in Dock.
To make a request, email info@bobwork.ai from the address on your account. If your data sits in a workspace run by your employer or another organisation, we may refer you to them, because they control that content. We will answer within the time the law requires. We will not treat you differently for using your rights. If you are in the EU or UK, you can also complain to your local data protection authority.
California residents (CCPA)
California residents have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioural advertising. Send requests to info@bobwork.ai. An authorised agent may make a request for you if we can verify your identity and their authority.
Cookies and browser storage
Dock uses only storage that is needed for it to work, such as keeping you signed in. We do not use advertising or tracking cookies. See the cookie policy for the full list.
Children
Dock is not for anyone under 18. You must be 18 or older to create an account. If we learn that someone under 18 has an account, we will close it and delete their data. If you think this has happened, tell us at info@bobwork.ai.
Security
We protect data with encryption in transit, encrypted backups, workspace isolation, 2-step verification and other measures described on our security page. No system is perfectly secure, so we cannot guarantee that data will never be accessed without permission. If a breach affects your personal data, we will tell you and the authorities where the law requires it.
Changes to this policy
We may update this policy as Dock changes. We will change the date at the top, and for significant changes we will tell account holders by email or in the app before the change takes effect.
Contact
Privacy questions and requests: info@bobwork.ai. Everything else: support@bobwork.ai.
BobOffice, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States.