Workspace data handling

Updated October 8, 2026.

Local delivery planning

The Delivery Planner runs in a bounded browser worker without an account, uploads, AI, autosave, analytics or communications. Up to 100 tasks, a working-week calendar and 366 non-working dates are held in page memory. Resource labels, dependencies, entered costs, actual dates and an optional baseline remain local. Statuses and actual dates do not silently reforecast the schedule. Costs are estimates or user-entered actuals, not bank or accounting records. The resource-leveling method is deterministic, not an optimal scheduling guarantee.

Explicit project JSON exports retain the reusable plan and baseline. Report JSON and CSV include task names, resource labels, dates, entered costs, source hashes and calculation limits; they may be confidential. Calendar exports contain all-day due-date snapshots, not invitations, reminders or live synchronization. Print produces a local client brief. Opening a project recalculates it and checks the baseline content hash; hashes do not authenticate facts. No project is automatically saved into your account, and this local feature does not extend account retention. Start a new plan or close/reload the page to discard local state. Previously downloaded files are unchanged.

Local decision comparisons

Decision comparison accepts two to six exported Business Workspace result reports from one workflow, up to 256 KiB each. Imported files, scenario names, baseline choices, decision criteria and comparison results stay in this page's memory. Comparison does not upload, autosave, send communications or use AI. Signed-in customers can retrieve selected saved reports through the existing authenticated service; their recorded source hashes are checked before loading. Original files and account runs remain unchanged.

Explicit JSON and CSV exports contain scenario names, metric values, your criteria and source references; JSON also records source hashes, methods and limitations. Review these for confidential information before sharing. Hashes identify content, not authenticity or source accuracy. Comparison does not retrieve original inputs, infer currency conversions, certify decisions or extend account retention. Clear reports or close/reload the page to discard local state.

Business work and reports

Service requests, delivery plans, supplier comparisons, inventory calculations, workflow cost scenarios, project quotes, capacity plans, invoice aging, renewal reviews and contract response checklists use deterministic calculations in Cloudflare Workers, without sending those inputs to AI. Work items store your title, owner label, dates, notes, status, source-report references and revision history in your private account. An owner label is not an invitation or shared-account permission. These workflows do not send communications, place orders or change external systems.

Invoice and quote calculations use entered amounts, not a connected bank or accounting ledger. Renewal dates and bid requirements are entered by you; source references do not establish that contractual conditions have been met. Use account labels rather than unnecessary personal or financial identifiers, and do not submit payment credentials or government identifiers.

Work items expire 30 days after their most recent edit. Archiving hides completed or inactive work but keeps it recoverable until expiry. Project exports include retained work items and the visible run index; download individual report inputs and results separately. The account export also includes retained work items. Account-scoped metadata is included in encrypted business backups; report objects remain in private R2 and are not embedded in database backups.

Saved setups and spreadsheets

Saved setups retain the entered input for the ten deterministic business workflows in private R2. D1 holds their names, workflow, hashes, sizes, revisions and expiry, not the input contents. They are account-scoped and expire 30 days after the last edit. Up to 50 setups and 50 attempted saves per account per UTC day are permitted, with a shared allowance of 1,000 attempted saves. Deleted setups disappear immediately; superseded and deleted input files are removed by scheduled cleanup after a five-minute upload window. A removed setup's minimal metadata remains until its 30-day expiry to prevent request replay, and save counters remain for 32 days. Export each setup as JSON before expiry. Setup files, like report files, are not embedded in database backups.

CSV imports are parsed locally, with up to 100 rows and 65 KB, and are sent to the platform only when you save a setup or run a workflow. Import rejects unknown columns, invalid dates and ambiguous numbers instead of guessing. Exports prefix formula-like text with an apostrophe to reduce spreadsheet formula execution; that protective character may remain when reimported. Numeric values are unchanged. Loading a setup or reusing previous input does not execute a workflow, update dates or carry forward AI consent. Review time-sensitive assumptions before running.

Your files and results

Project names, run records, label reads and usage are saved to your Elkwai Solutions account in Cloudflare D1. Run inputs, results, site photos and test documents are saved in private Cloudflare R2 storage. Account access requires authentication. Files are not published or indexed. Guest links grant limited access as described below, not access to your account.

The browser resizes and re-encodes uploaded site photos, removing their original metadata. The API also accepts original JPEG, PNG and PDF files; those may contain metadata. Only submit site information and photographs you have permission to use. Avoid credentials, faces, personal documents and unnecessary location detail. File signatures and stored hashes are checked; this is not a malware scan.

Guest survey links

The project owner may create a link that works without an account, normally for 48 hours and at most seven days. Anyone holding that link can see the selected site name, requested work and survey checklist, submit one set of observations, and upload or read files uploaded through that link until it expires or is revoked. Private attachments the owner adds separately are not accessible through the guest link. The link does not expose the original scope's inventory or photos, other projects, customer identity or hosted AI.

The original scope is unchanged. The submitted survey and files become private records in the owner's account and use the owner's beta limits. A link is a bearer capability, not a verified personal identity. Keep it private and revoke it when finished. Elkwai stores its hash, lifetime, revocation state and submission reference. The browser removes the token from the URL fragment after opening it and holds it only in memory. Reopening the complete original link is needed after a page reload. Link tokens are never placed in query strings or persistent browser storage.

Local label reading

Equipment-label OCR uses Tesseract.js 7.0.0 and an English recognition model in your browser, with engine and model files served by Elkwai. The uploaded photo is fetched privately for local processing; no photo is sent to an external OCR or AI provider. Only the extracted text, engine identifier and photo hash are submitted to your account. Saved reads include that text, candidate model/serial/MAC values, the source photo hash and time. These are unconfirmed, client-reported readings, not certified equipment identities or accuracy scores. Reviewed inventory values retain a source-read reference. Four distinct reads per photo are allowed. Manufacturer compatibility, ownership, serial authenticity and field accuracy are not automatically verified.

Hosted AI

Document briefs and business document reviews send the text and focus you submit to Cloudflare Workers AI. Reviews suggest categories for passages: actions, requirements, risks, decisions and open questions. Site question prioritization sends the site name, requested work and existing unanswered questions. Each AI run requires your confirmation. Photos and test PDFs are not sent to AI by these workflows. The model selects source lines or existing question IDs; Elkwai Solutions validates the references and copies the original passages. Exact quotation does not independently establish truth, correct classification or complete coverage. Owners, deadlines and urgency are not inferred; review and assign them yourself. Adding a finding to the work queue is an explicit action and retains its source-report reference. Do not submit passwords, API keys, highly sensitive records or documents you are not authorized to process.

Cloudflare states that it does not use customer content to train its Workers AI models without explicit consent. Cloudflare data usage. The text service uses Meta Llama 3.1 8B. Separately offered local/private AI installations are not this hosted execution environment. ChatGPT subscriptions or credits are not used by this hosted workflow.

Retention, export and deletion

Run inputs, outputs and attached evidence expire with the run after 30 days. Label reads expire with their photo. References in newer reports do not extend the original photo or label-read retention. Export before expiry. Scheduled cleanup removes expired files and records. Delete in All projects & runs removes the run and files; execution or upload may defer final cleanup until its five-minute lease or staging period expires. Deleting a source scope removes its guest grants. Deleting a guest submission revokes its link. Project names remain until you delete the project. Daily usage and admission counters are kept for 32 days to prevent quota bypass.

Limits and payment

The beta permits 20 projects, 250 retained work items, 20 runs and 3 AI attempts per account per UTC day, with shared service limits of 200 runs and 20 AI attempts. Each business report accepts at most 100 rows. AI failures may consume an attempt. Evidence limits are four files per run, twelve per account per UTC day and one hundred across the service per day, up to 512 KiB per file. Guest grants are limited to five active links per scope and twenty per account. There is no customer charge, subscription signup, automatic email sending or external-system mutation from these workflows. Future paid workflows require a separately agreed purchase.

Your rights and support

The Elkwai Privacy Notice and Terms also apply. Contact support@elkwai.com about access, correction or deletion. Workspace processing does not itself constitute legal, financial or regulatory advice.