Worky, Inc. ("Worky", "we", "us") provides operations software for home service businesses at useworky.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

Account information

When you create a Worky account we collect your name, email address, password (hashed), business name, phone number, and timezone.

Business and customer data

We store the data you create inside Worky: clients, properties, requests, quotes, jobs, invoices, payments, employees, time entries, files and notes.

Payment information

Payments are processed by Stripe. We do not store full card numbers; we receive only tokens, last four digits, brand, and processing metadata.

Usage and device data

Logs, IP address, browser, device type, pages viewed, and approximate location for security, debugging, and analytics.

Cookies

Strictly necessary cookies for authentication and session management, plus optional analytics cookies.

2. Google user data

When you choose "Sign in with Google" we use Google OAuth to authenticate you. We request only the following scopes:

openid — to authenticate your identity.
email — to obtain your primary Google email address.
profile — to obtain your name and profile picture URL.

From these scopes, Worky receives and stores:

Your email address (used as your Worky login identifier).
Your first and last name (used to populate your Worky profile).
A Google account identifier (used to link the OAuth identity to your Worky account).

How we use Google user data: solely to create and authenticate your Worky account, populate your profile, and let you sign back in. We do not use Google user data for advertising, do not sell it, and do not share it with third parties for their own purposes.

How we store Google user data: the email, name, and Google identifier are stored in our authentication database (hosted on Supabase / Cloudflare infrastructure) encrypted in transit (TLS) and at rest. We do not store your Google password or long-lived Google access tokens beyond the active session.

How we share Google user data: we do not share Google user data with any third party except sub-processors strictly required to operate the Service (Supabase for database/auth, Cloudflare for hosting, Resend for transactional email, Stripe for payments). These sub-processors are contractually bound to confidentiality and security.

How to revoke access: you can revoke Worky's access to your Google account at any time at https://myaccount.google.com/permissions. You can also delete your Worky account by emailing privacy@useworky.com; deletion removes the stored Google email, name, and identifier from our systems.

Worky's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use information

Provide, maintain, and improve the Service.
Authenticate users and protect against fraud and abuse.
Send transactional email (receipts, password resets, job notifications).
Provide customer support.
Comply with legal obligations.

4. Sharing

We share information only with:

Sub-processors that operate the Service (Supabase, Cloudflare, Stripe, Resend, Google Maps).
Authorities when required by law.
An acquirer in the event of a merger or acquisition, subject to this policy.

We do not sell personal information.

5. Data retention

We retain account and business data for as long as your account is active. After deletion we remove personal data within 30 days, except where retention is required by law (e.g. tax records).

6. Security

All traffic is encrypted with TLS. Data at rest is encrypted. Access to production systems is restricted and audited. Passwords are hashed with industry-standard algorithms.

7. Your rights

Depending on your jurisdiction (GDPR, CCPA, etc.) you may request access, correction, deletion, portability, or restriction of your personal data. Contact us at privacy@useworky.com.

8. Children

The Service is not directed to children under 16 and we do not knowingly collect their data.

9. International transfers

Worky is operated from the United States. By using the Service you consent to the transfer of your information to the United States and other countries where our sub-processors operate.

10. Changes

We may update this policy. Material changes will be notified by email or in-product notice at least 7 days before taking effect.

11. Contact

Worky, Inc.
Email: privacy@useworky.com