Privacy Policy
This is our plain language privacy policy. It tells you what data we collect, why we collect it, who we share it with, and how to exercise your rights. The full legal version is consistent with this summary. If you ever spot a conflict, the plain language wins for our intent. We will fix the legal version to match.
Contents
1. Who we are
Workflow Prodigy operates the website at workflowprodigy.com and the operations platform at app.workflowprodigy.com. We are the controller of personal data described in this policy.
2. What we collect
We collect the data you give us, the data we need to operate the service, and the minimum data needed to keep the service secure.
- Account data. Name, email, hashed password, and the company you belong to.
- Operational data. Customers, estimates, jobs, invoices, and the records you create inside the platform.
- Communications. Email and form messages you send us.
- Technical data. IP address, browser, device, and timestamps required to authenticate, prevent abuse, and operate audit logs.
- Payment metadata. If you take payments through the platform, our payment processor handles card data. We see metadata only.
3. Why we collect it
- To provide the service you signed up for.
- To secure the service against fraud and abuse.
- To comply with the law in the jurisdictions we operate in.
- To improve the product using aggregated, non identifying signals.
We do not sell personal data. We do not share personal data for advertising. We do not run third party advertising trackers on our marketing site.
4. Who we share it with
We share data only with the vendors needed to deliver the service. Each vendor is contractually bound to use the data only for the scope of work we have engaged them for.
- Hosting and infrastructure for the website and the platform.
- Email delivery for transactional and account messages.
- Payment processing for invoices paid through the platform.
- Analytics at the aggregated level to understand product usage.
The current list of vendors is available on request. Send us a note at support@workflowprodigy.com.
5. Cookies and similar technologies
The marketing site uses one piece of local storage to remember your dark or light theme choice. It does not track you. The platform uses session cookies required to keep you signed in. We do not run third party advertising or behavioral tracking pixels on the marketing site.
6. How long we keep it
We keep account and operational data for the duration of your subscription and for a reasonable archival window after cancellation, then we delete it. Audit logs that we are legally required to keep have their own retention. Backups roll on a defined schedule and overwrite themselves over time.
7. Your rights
You can ask us to access, correct, export, or delete your personal data. Email support@workflowprodigy.com from the address on your account. We respond within 30 days, usually faster. If we cannot honor a request, we explain why.
8. Security
HTTPS only with HSTS. Passwords stored hashed with a modern KDF. Two factor available. Activity logged. The full security posture is described on our security page and our security policy. Vulnerability reports go to security@workflowprodigy.com.
9. Children
The service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
10. Changes to this policy
We will update the date at the top when we change this policy. Material changes are announced by email to account owners. The current version always lives at this URL.
11. Contact us
Email support@workflowprodigy.com with any privacy question. For security disclosures use security@workflowprodigy.com.