Privacy policy

Effective date: 2025-09-08

Platform: Workfloows ("we," "our," "us")

Website: workfloo.ws

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you use our APIs, tools, and related services ("Services").

The data controller responsible for your personal data is:

We may collect the following information when you use our Services:

• Account information: name, email address, billing details, and login credentials.
• Payment data: processed by our payment provider (Polar); we do not store your card details.
• Usage data: API requests, logs, IP address, browser type, and device information.
• Support communication: any information you provide when contacting us.

We use your data to:

• Provide and operate our Services.
• Process payments and manage subscriptions or prepaid credits.
• Respond to inquiries and provide customer support.
• Monitor usage and prevent abuse, fraud, or violations of our Terms.
• Improve and develop our Services.
• Comply with legal obligations.

We process your personal data under the following legal bases (as required by GDPR):

• Contractual necessity: to deliver the Services you have purchased.
• Legal obligations: to comply with accounting, tax, and regulatory requirements.
• Legitimate interest: to maintain, secure, and improve our Services.
• Consent: when required (e.g., for marketing communications).

We may share your information with:

• Service providers: payment processors, hosting providers, analytics tools, and customer support platforms.
• Legal authorities: if required by law or to protect our rights.

We do not sell your personal data to third parties.

We use trusted third-party providers to help us deliver our Services. These processors may handle personal data on our behalf:

• Payment processing: Polar
• Hosting & infrastructure: Vercel, Google Cloud, Cloudflare
• Analytics & error monitoring: PostHog
• Customer support & communication: Google Workspace

These providers are bound by data protection agreements and only process data as necessary to deliver their services to us.

We keep personal data only as long as necessary to provide the Services, fulfill legal obligations, or resolve disputes.

• Account and billing records: retained as long as legally required (e.g., under tax law).
• API logs: typically retained for security and debugging purposes for a limited period.

As an individual under GDPR, you have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability (receive your data in a structured, machine-readable format).
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with your local supervisory authority.

To exercise these rights, contact us at support@workfloo.ws.

If you have questions or concerns about this Privacy Policy, contact us at: