Privacy Policy

Wrkbase ("Wrkbase", "we", "us") provides a multi-tenant office-management platform covering tasks, time tracking, attendance, team chat, leave, performance, payroll, reporting, and an AI agent. This policy explains what we collect when you use our marketing site and the Wrkbase application, and why.

When you sign up, we collect the information you give us directly:

• Account details: name, work email, and password (stored as a salted hash, never in plain text).
• Organization details: company name and the data your organization adds, employees, tasks, attendance records, chat messages, leave requests, and salary and payroll records.
• Usage data: pages visited, features used, and device/browser information, to keep the product working and to understand what to improve.

We do not sell your data, and we do not use your organization's operational data (tasks, chat, salary records, etc.) to train third-party AI models.

Wrkbase's AI agent and support chat send the minimum data needed to fulfil your request to our AI provider in order to generate a proposed plan or an answer. The agent never executes an action without your explicit review and confirmation, and every attempt, successful or not, is written to your organization's immutable audit log.

• To provide, maintain, and secure the service you signed up for.
• To send account, billing, and product notifications (you control most notification channels in your own settings).
• To respond to support requests.
• To meet legal and accounting obligations.

We share data only with infrastructure and service providers who help us run Wrkbase (hosting, email delivery, and our AI provider for the features described above), each bound by their own confidentiality and data-processing terms. We do not sell personal data to third parties, and we do not share one organization's data with another. Wrkbase is multi-tenant by design, and every record is scoped to your organization.

Paid plans are billed through Paddle.com Market Limited, our Merchant of Record. When you upgrade, your name, email, and payment details are shared with and processed directly by Paddle to complete the transaction, issue receipts, and handle tax — see Paddle's Privacy Policy for how they handle it.

Your data stays in your workspace for as long as your account is active. If you downgrade or cancel, nothing is deleted automatically. You stay in control of your data and can request export or deletion at any time by contacting us. Audit log entries are retained in an immutable, append-only form as a security and compliance record, even after other data is deleted.

Depending on where you're located, you may have the right to access, correct, export, or request deletion of your personal data, and to object to certain processing. To exercise any of these rights, contact us at support@mywrkbase.com.

Data is encrypted in transit (HTTPS) end to end. Access within the product is governed by data-driven, per-organization role-based access control, and every mutating action, human or AI agent, is written to a database-trigger-enforced audit log that cannot be edited or deleted after the fact.

If we make material changes to this policy, we'll update the date at the top of this page and, where appropriate, notify account owners directly.

Questions about this policy or your data can be sent to support@mywrkbase.com.