Your Data is a Tool, Not a Product

Workr is operated by Dominic Baca d/b/a Workr, based in New Mexico, United States. This policy covers the Workr website and app.

There are two different kinds of data here, and the distinction matters:

• Operator data — your own account. Your name, email and business details. We decide how this is handled, and this policy governs it.
• Customer data — the people you do work for. Their names, phone numbers, addresses and job history, entered by you. We hold this on your behalf and act on your instructions. You decide what to collect and how long to keep it. If you are one of those customers and want your details changed or removed, contact the operator you hired — they control that record. You can also write to us and we will pass the request on.

Your account. Name, email address, a hashed password (we never store the password itself), and two-factor settings if you enable them.

Your business. Business name, trade, service area, service types and prices, branding, and any custom domain you connect.

What you enter about your customers. Name, phone number, email, address, notes, service history and communication preferences, including when they opted in or out of messages.

Work records. Jobs, schedules, messages, quotes, invoices, reviews, job photos and voice memos.

Payments. Billing contact details and a record of what was charged. Card numbers never touch our servers — they go directly to Stripe.

Technical and security data. IP address, browser type, and pages requested. For your own sign-in sessions we record the approximate city and country so you can spot a login you do not recognise, plus a log of security events such as password changes.

Scan data. If you use QR leave-behind cards, we record that a scan happened and when, so you can see which cards are working.

To run the product: show your jobs, send the messages you ask us to send, produce your invoices, and take payment for your subscription.

To keep accounts secure — detecting suspicious sign-ins, preventing abuse, and blocking automated attacks.

To fix things: diagnosing errors and understanding which features are used, so the product improves.

To contact you about your account, and — only if you agree — about product news. You can unsubscribe from the latter at any time.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not run advertising trackers on the app.

We use the services below to run Workr. Each one only receives what it needs to do its job, and none of them may use your data for their own purposes.

Two features send your content to an AI service: voice-memo transcription and the dispatch assistant. What you record or type in those features is transmitted for processing and a result is returned.

By default this runs on Cloudflare Workers AI. If you supply your own provider key in settings, your content goes instead to the provider you chose — OpenAI, Anthropic or Google — under that provider's terms.

If you would rather no customer content reach an AI service, do not use these features. Nothing else in Workr sends your data to an AI provider.

We keep data while your account is open. When you delete your account:

• There is a grace period first, so an accidental or malicious deletion can be undone. We email you before it becomes final.
• Then your personal account data is permanently deleted — your user record, sign-in sessions, connected accounts, two-factor settings, security and session-location history, and your avatar. Entries about you in our audit log are redacted.
• Your business records are handled separately. Jobs, customers, invoices, photos and voice memos belong to the business, not to your personal login — a workspace can outlive one person's account, and financial records often have to be kept. Closing a business account puts the workspace into a closing state, and its data is deleted on that schedule. Deleting yourself does not silently erase a colleague's business.
• In-app notifications are cleared after 7 days regardless.

Some records are kept longer where the law requires it — payment and tax records in particular — and backups persist for a short period before they rotate out.

You can see and correct your account information in settings, export your business data at any time, and delete your account from settings. You can opt out of marketing email from any such email.

You can also ask us to do any of these by writing to privacy@myworkr.com. We aim to reply within 30 days and will not treat you differently for asking.

Depending on where you live, you may have additional rights over your personal information — including to know what is held, to have it deleted, and not to be discriminated against for exercising those rights. We honour these requests regardless of where you live.

Workr is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child's data has been submitted, tell us and we will remove it.

Workr is operated from the United States. If you use it from elsewhere, your data is processed in the United States.

Data is encrypted in transit. Passwords are hashed, never stored in a readable form, and card numbers never reach our servers. Each business workspace is isolated so one operator cannot read another's records. Two-factor authentication is available and we recommend turning it on.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information, we will notify you and any regulator the law requires, without undue delay.

Public forms — sign-up and customer job requests — are protected by Cloudflare Turnstile, used only for fraud and abuse prevention, never for tracking, ads or analytics.

We use cookies that are necessary to run the site — keeping you signed in, remembering preferences, and security. We do not use advertising or cross-site tracking cookies.