Privacy Policy

Last updated: October 2026

lesswork Productivity Solutions e.U. (“lesswork”, “we”, “us”) respects the privacy of individuals who interact with our website, AI voice and messaging systems, business services, and support channels.

This Privacy Policy explains how we collect, use, disclose, protect, and retain personal data.

1. Who is responsible for your data?

For interactions where lesswork determines the purposes and means of processing, the data controller is:

lesswork Productivity Solutions e.U.
Wehlistrasse 291/2/205
1020 Vienna, Austria
Company Register: FN 649554 b
VAT ID: ATU75285718

Privacy enquiries may be sent to:

office@lessworkbot.com

When lesswork operates an AI, voice, messaging, workflow, or automation service on behalf of a business customer, that customer may instead be the data controller and lesswork may act as a data processor. In those cases, the customer's privacy notice and our contractual data-processing arrangements may also apply.

2. Personal data we may process

Depending on how you interact with us, we may process information including:

  • name and business contact details;
  • email address and telephone number;
  • company and professional information;
  • information submitted through website forms;
  • information provided during telephone, voicebot, chatbot, or messaging interactions;
  • call metadata and operational records;
  • transcripts or recordings where the applicable deployment permits them;
  • appointment, enquiry, qualification, routing, or handoff information;
  • IP address, browser, device, and technical information;
  • service, diagnostic, security, and usage data.

We aim to collect only information reasonably necessary for the relevant service or interaction.

3. Why we process personal data

We may process personal data to:

  • provide, operate, configure, and support our services;
  • respond to enquiries and requests;
  • conduct requested voice, messaging, scheduling, or workflow interactions;
  • send information that a user has specifically requested;
  • manage customer and business relationships;
  • provide technical support and troubleshoot systems;
  • monitor reliability, security, misuse, and operational performance;
  • maintain records required for contractual, accounting, regulatory, or legal purposes;
  • improve our services using appropriately aggregated or de-identified information where practicable;
  • communicate about our services where permitted by law and, where required, with consent.

4. Legal bases

Where the GDPR applies, we rely on one or more appropriate legal bases, depending on the circumstances, including:

  • performance of a contract or steps requested before entering into a contract;
  • legitimate interests in operating, securing, supporting, and improving our business and services;
  • consent, where processing requires consent;
  • compliance with legal obligations.

Where consent is the applicable basis, it may be withdrawn at any time without affecting processing already lawfully carried out.

5. AI, voice and automated systems

lesswork provides AI-assisted voice, messaging, routing, workflow, and automation services.

Where personal data is processed by these systems, the exact processing depends on the relevant deployment and customer requirements.

We design production workflows to limit collection to information relevant to the operational purpose and to provide human escalation or handoff where appropriate.

Automated systems are not intended to replace legally required human judgment in high-risk or regulated decisions unless specifically designed, governed, and contractually agreed for a lawful use case.

6. SMS and mobile messaging privacy

If you provide a mobile telephone number and consent to receive SMS messages from lesswork:

Your mobile information and SMS opt-in data or consent will not be sold or shared with third parties for promotional or marketing purposes.

We will not share your opt-in to an SMS program with third parties for purposes unrelated to providing the services of that messaging program.

We may share mobile information, including SMS opt-in or consent status, with service providers necessary to deliver the requested messaging service, including telecommunications providers, messaging platforms, and other vendors involved in message delivery.

These providers may process the information only as necessary to provide the relevant service or as otherwise permitted by applicable law.

7. Service providers and recipients

We use third-party technology and infrastructure providers to operate our services.

Depending on the deployment, these may include providers of:

  • telecommunications;
  • AI and conversational systems;
  • cloud hosting;
  • databases and storage;
  • messaging;
  • email delivery;
  • scheduling;
  • monitoring and diagnostics;
  • authentication and security;
  • customer relationship management.

We select providers based on operational, security, privacy, and commercial requirements appropriate to the deployment.

Where required, appropriate contractual and data-protection arrangements are used.

We do not sell personal data.

8. International data processing

Some service providers may process data outside Austria or the European Economic Area.

Where GDPR rules governing international transfers apply, lesswork uses appropriate safeguards required by applicable law, which may include adequacy decisions, contractual safeguards, or other lawful transfer mechanisms.

Specific hosting or data-residency arrangements may also be agreed with customers where technically and commercially available.

9. Data security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include:

  • encryption in transit and, where supported by the relevant service, encryption at rest;
  • access controls;
  • multi-factor authentication;
  • least-privilege access;
  • logging and monitoring;
  • controlled production deployment practices;
  • secrets-management practices;
  • incident-response procedures.

No internet-based or cloud service can guarantee absolute security.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide and support services, to satisfy contractual or legal obligations, or to maintain necessary security and operational records.

Retention periods may differ between deployments because customer requirements and technical configurations differ.

Where lesswork acts as a processor, retention may also be governed by the relevant customer agreement and instructions.

11. Cookies and website technologies

Our website uses limited technologies to operate securely and provide functions requested by visitors, including contact forms, language-specific content, and embedded conversational services. We do not deploy advertising or behavioural-tracking cookies for our own marketing. Certain functions may use technically necessary cookies or limited browser storage for website operation, security and remembered preferences.

We display a brief informational privacy notice. Selecting OK records an acknowledgment in the visitor's browser storage so that the notice need not be displayed again. This acknowledgment is not consent to tracking or other non-essential technologies.

The embedded third-party conversational widget is loaded on website pages and its provider or delivery network may receive technical information, such as an IP address and browser or device details, when it loads. Active voice or text interactions may transmit additional interaction data. Hosting and form-protection providers may also process technical data. Third-party cookies or comparable browser storage, if any, depend on those providers' implementation. Technologies requiring prior consent under applicable law must not be deployed without that consent.

12. Your data-protection rights

Where the GDPR applies, you may have rights including:

  • access to your personal data;
  • correction of inaccurate data;
  • deletion in applicable circumstances;
  • restriction of processing;
  • objection to certain processing;
  • data portability where applicable;
  • withdrawal of consent where processing is based on consent;
  • the right to lodge a complaint with a competent supervisory authority.

Requests may be sent to office@lessworkbot.com.

13. Changes to this Policy

We may update this Privacy Policy when our services, technology, legal obligations, or processing practices change.

The current version and effective date will be published on this page.