Legal

Privacy Policy

Effective date: June 12, 2026 · Version 1.0

This Privacy Policy explains how Workliq collects, uses, stores, and shares information about you when you use our platform and services. We are committed to protecting your privacy and being transparent about our data practices.
Contents
1. Who We Are2. Information We Collect3. How We Use Your Information4. Legal Basis for Processing (EU/UK Users)5. How We Share Your Information6. Data Retention7. Cookies8. Data Security9. Your Rights10. International Transfers11. Children's Privacy12. Changes to This Policy13. Contact Us

1. Who We Are

Workliq Inc. ("Workliq," "we," "us," or "our") operates the Workliq workflow automation platform accessible at workliq.com. We are the data controller for the personal data we collect about visitors and users. Data Protection contact: privacy@workliq.com

2. Information We Collect

2.1 Information you provide

• Account information: name, email address, company name, and role when you sign up • Billing information: payment details processed and stored securely by Stripe — we do not store card numbers • Profile information: preferences, settings, and content you create within the platform • Communications: emails and messages you send us, including support requests

2.2 Information collected automatically

• Usage data: features used, workflows created, automations triggered, and frequency of use • Log data: IP addresses, browser type, operating system, referring URLs, and timestamps • Device data: device type, unique device identifiers, and browser settings • Cookies and similar technologies: described in Section 7 below

2.3 Information from third parties

When you connect third-party integrations (such as HubSpot, Slack, or Gmail), we receive access tokens and may process data from those services as necessary to provide the automation functionality you have configured. We do not store integration data beyond what is operationally required.

3. How We Use Your Information

We use the information we collect to: • Provide, operate, and maintain the Workliq platform • Process transactions and send billing-related communications • Respond to your comments, questions, and support requests • Send product updates, security notices, and administrative messages • Monitor and analyse usage patterns to improve the Service • Detect and prevent fraud, abuse, or security incidents • Comply with legal obligations • Send marketing communications where you have opted in (you can opt out at any time)

4. Legal Basis for Processing (EU/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases: Contract — Processing necessary to provide the Service you have subscribed to. Legitimate interests — Processing for fraud prevention, security, product improvement, and analytics, balanced against your rights. Consent — Marketing communications, which you can withdraw at any time. Legal obligation — Processing required to comply with applicable law.

5. How We Share Your Information

5.1 Service providers

We share information with trusted third-party vendors who help us operate the Service, including: • Stripe — payment processing • Supabase — database hosting and authentication • Vercel — application hosting • Resend — transactional email delivery • Anthropic — AI processing for workflow steps (data is not used for model training) • PostHog — product analytics • Sentry — error monitoring

5.2 Business transfers

If Workliq is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

5.3 Legal requirements

We may disclose your information where required by law, regulation, legal process, or governmental request, or where necessary to protect the rights, property, or safety of Workliq, our users, or others.

5.4 With your consent

We will share your information with third parties when you have given explicit consent for us to do so.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service: • Account data: retained for the duration of your account plus 90 days after closure • Billing records: retained for 7 years to comply with financial regulations • Workflow and run data: retained for the duration of your subscription plan's data window • Support communications: retained for 2 years You may request deletion of your personal data at any time. We will action deletion requests within 30 days, subject to legal retention requirements.

7. Cookies

We use cookies and similar technologies to provide and improve the Service: Essential cookies — Required for authentication, security, and core functionality. These cannot be disabled. Analytics cookies — PostHog analytics to understand how users interact with the Service. You can opt out via your account settings. Preference cookies — To remember your settings and preferences across sessions. You can control cookie settings through your browser. Note that disabling essential cookies will impair the functionality of the Service.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data: • Encryption of data in transit (TLS 1.2+) and at rest (AES-256) • Role-based access controls limiting employee access to personal data • Regular security audits and vulnerability assessments • SOC 2 Type II compliance programme (in progress) • Incident response procedures with breach notification within 72 hours of discovery Despite these measures, no transmission over the internet is completely secure. If you believe your account has been compromised, please contact us immediately at legal@workliq.com.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data: Access — Request a copy of the personal data we hold about you. Rectification — Request correction of inaccurate or incomplete personal data. Erasure — Request deletion of your personal data, subject to legal retention requirements. Portability — Request your personal data in a structured, machine-readable format. Objection — Object to processing based on legitimate interests. Restriction — Request restriction of processing in certain circumstances. Opt-out of marketing — Unsubscribe from marketing emails at any time via the link in each email. To exercise any of these rights, please contact us at privacy@workliq.com. We will respond within 30 days.

10. International Transfers

Workliq may transfer your personal data to countries with different data protection laws. When we transfer data internationally, we rely on EU Standard Contractual Clauses for transfers from the EEA, UK International Data Transfer Agreements for transfers from the UK, and adequacy decisions where applicable.

11. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us at privacy@workliq.com and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by prominent notice on the Service at least 30 days before the changes take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: Workliq Inc. Email: privacy@workliq.com Website: workliq.com If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

Questions about your privacy?
Email us at privacy@workliq.com and we will respond within 30 days.