Draft — pending legal review. This document describes how the product works today; it is not yet a binding legal agreement.
Privacy Policy
Workforce OS is a workforce-management platform. Your employer (the workspace owner) decides what employee data is entered; we process it on their behalf.
What we process
- Account data: name, work email, role, sign-in and security events.
- Employee records entered by your organization: profile, employment, attendance, leave, payroll, documents and performance information.
- Usage and audit data: actions taken in the product, kept in a tamper-evident audit log.
Why we process it
To provide the service your organization subscribes to, to secure accounts and detect abuse, to bill subscriptions, and to meet legal obligations.
How it is protected
- Data is isolated per workspace and every request is checked against the signed-in user's role and reporting line.
- Sensitive fields such as national ID and bank details are masked for users who do not need them.
- Multi-factor authentication, session revocation and rate limiting protect sign-in; sessions use short-lived tokens.
- Uploaded files are scanned before they can be downloaded.
Who we share it with
Only the sub-processors listed on our Data Processing Addendum page, and only as needed to run the service.
Retention and your rights
Employee data is kept for as long as your organization keeps the workspace, subject to its retention settings. Requests to access, correct or delete personal data should go to your employer first; we support them with export and anonymization tools.
Contact and governing terms
Contact details for privacy requests: [to be provided].
Governing law, controller identity and data-transfer mechanisms: [Clause to be provided by counsel].