Privacy Policy

What we collect

• Account details: your email address, your name if you give it, and your password (stored only as a secure hash by our authentication provider). If you choose “Continue with Google”, we receive your name, email address and profile picture from Google — nothing else.
• Workspace data: your company name and currency, the people you invite and their roles, and the company data you import, such as customer and product lists.
• Documents: files you upload (for example purchase orders), the information extracted from them, and the review and approval history.
• Feedback: reports you send with the Feedback button, including the page path and browser version if you choose to include them.
• Early-access requests: the details you enter in the early-access form on our website.
• Website assistant: questions you type into the chat assistant on our website. We do not save these conversations; they are sent to our AI provider to generate an answer. To prevent abuse we keep a one-way hashed form of your IP address, used only to count requests.
• Technical data: our hosting providers keep standard server logs (such as IP address, browser type and request time) to run and secure the service.

How we use it

• To create and secure your account and sign you in.
• To provide the service: reading your documents, preparing work for your approval, and storing results.
• To send the emails the service needs, such as confirming your email or resetting your password.
• To answer your support requests and feedback, and to contact you about early access if you asked us to.
• To keep the service secure, prevent abuse and fix problems.

We do not sell your personal data, we do not use it for advertising, and we do not use your documents or company data to train AI models.

Who processes data for us

We use a small number of service providers, each only for the purpose listed:

• Supabase — database, file storage and sign-in. Our project is hosted in the EU (Ireland).
• Netlify — hosts the website and app, and stores early-access form submissions.
• Anthropic — the AI model (Claude) that reads uploaded documents and answers questions in the website assistant. Under its commercial terms, Anthropic does not use this data to train its models.
• Resend — sends our account emails and delivers feedback reports to our team.
• Cloudflare — domain name services and forwarding of email sent to support@worknivo.app.
• Google — only if you choose to sign in with Google.

Some of these providers may process data outside your country, including in the United States. Where that happens, we rely on the safeguards those providers offer, such as standard contractual clauses.

Cookies and local storage

We use only essential cookies: the ones that keep you signed in and protect sign-in and password-reset flows. The website also remembers, for the current browser tab only, that you have already seen the intro animation. We do not use analytics, advertising or tracking cookies.

How long we keep data

We keep account, workspace and document data for as long as your account is active. If you ask us to delete your account, we delete your personal data and any workspace you are the only member of, except where we must keep something to meet a legal obligation. Copies in backups are removed as those backups expire. Early-access requests and feedback are kept until they are no longer needed to respond to you or improve WorkNivo.

Security

Each company’s data is separated at the database level, uploaded documents are stored privately, data is encrypted in transit, and AI suggestions are never acted on without a person’s approval. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it. You can read more about our approach on the security section of our website.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict how we use it, and to withdraw consent. To do any of these, email support@worknivo.app from the address on your account. We will reply within 30 days. You can also complain to your local data protection authority.

Children

WorkNivo is a business tool and is not intended for anyone under 16.

Changes to this policy

If we change this policy we will update the date at the top of this page, and tell account holders by email before any significant change takes effect.

Contact

Questions about this policy or your data? Email support@worknivo.app.