WorkMate ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.
1. Information We Collect
Account and Profile Information
When you create a WorkMate account, we collect:
- •Full name and email address
- •Password (stored as a one-way hash — we never see it in plain text)
- •Phone number (optional, provided during sign-up or profile setup)
- •Business name, trade type, and business address
- •Country and payment-related account details
Business and Operational Data
To provide the Service, we store data you create or import:
- •Customer records: names, phone numbers, email addresses, and property addresses
- •Job records: titles, descriptions, scheduled dates, service line items, photos, and status
- •Invoices and quotes: line items, totals, tax rates, payment status, and activity logs
- •Expense receipts and job photos you upload
- •Team member information (names, roles, positions)
- •Customer signatures collected on job completion
- •Notes and internal job instructions
Payment Information
Payment processing is handled by Stripe. We do not store your full payment card details on our servers. Stripe may collect and store card numbers, expiration dates, and billing addresses directly. We store only Stripe customer IDs, subscription status, and payment intent references. For more information, see Stripe's Privacy Policy.
Device and Usage Data
When you use the Service, we may automatically collect:
- •Push notification tokens (to deliver job and payment alerts to your device)
- •IP address and general location (country-level, for fraud prevention)
- •Device type, operating system, and app version
- •Feature usage patterns to improve the product (aggregated, non-identifying)
Website Inquiry Data
If you use the WorkMate Website Builder, inquiries submitted through your business website are stored in your account dashboard. These include the name, email, phone number, and message provided by the person contacting you.
2. How We Use Your Information
We use the information we collect to:
- •Create and manage your account and subscription
- •Deliver core features: job scheduling, invoicing, quoting, and team management
- •Send invoices and payment receipts to your customers on your behalf
- •Send SMS appointment reminders to your customers (via Twilio, when configured)
- •Process payments and manage billing through Stripe
- •Generate AI-assisted website copy and receipt analysis using Claude (Anthropic)
- •Send you push notifications about job updates, payments, and team activity
- •Send transactional emails related to your account (password resets, billing alerts)
- •Improve and debug the Service based on aggregated usage patterns
- •Comply with legal obligations and enforce our Terms of Service
We do not use your business data or your customers' data to train AI models or to sell to third parties.
3. How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances:
With Your Customers
When you send an invoice or quote, your business name, contact information, and the invoice details are shared with your customer via email or SMS. This is the core function of the Service and you control when and to whom this information is sent.
With Your Team Members
Employees or subcontractors you add to your WorkMate account can see job details, customer addresses, and scheduling information for jobs they are assigned to. You control which team members have access.
With Service Providers
We share limited data with trusted third-party providers who help us operate the Service:
- •Supabase — database and authentication infrastructure (your data is stored on Supabase-hosted PostgreSQL servers)
- •Stripe — payment processing, subscription billing, and contractor payouts
- •Resend — transactional email delivery (invoice emails, receipts)
- •Twilio — SMS delivery for invoice and appointment notifications
- •Anthropic (Claude) — AI-powered features (receipt scanning, website copy generation). Receipt images and website details are sent to Anthropic's API for processing
- •Expo / React Native — push notification infrastructure
Each provider is contractually bound to process data only as instructed and to maintain appropriate security measures.
For Legal Reasons
We may disclose your information if required to do so by law, court order, or governmental authority, or where we believe disclosure is necessary to protect the rights, property, or safety of WorkMate, our users, or others.
Business Transfers
If WorkMate is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
4. Data Storage and Security
Your data is stored on servers provided by Supabase, which uses industry-standard encryption at rest and in transit (TLS/HTTPS for all connections). We implement row-level security policies to ensure users can only access their own data.
Job photos, receipts, website images, and customer signatures are stored in Supabase Storage with access controls tied to your contractor account.
While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to following best practices and promptly addressing any security incidents.
5. Data Retention
We retain your account data for as long as your account is active. If you close your account, we will delete or anonymise your personal information within 90 days, unless we are required to retain it for legal or financial compliance purposes (for example, transaction records may need to be retained for up to 7 years under applicable tax laws).
Customer data, job records, and invoices you have created are retained for as long as your account is open. You may export or delete this data at any time from within the app.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- •Access — request a copy of the personal data we hold about you
- •Correction — request that we correct inaccurate or incomplete data
- •Deletion — request that we delete your account and associated data (subject to legal retention requirements)
- •Portability — request an export of your data in a machine-readable format
- •Restriction — request that we restrict processing of your data in certain circumstances
- •Objection — object to processing of your data for direct marketing purposes
To exercise any of these rights, contact us at help@workmatecrm.com. We will respond within 30 days.
7. Cookies and Local Storage
Our web application uses browser local storage and session storage to maintain your login session and save user preferences (such as default tax rate). We do not use third-party advertising cookies or tracking pixels.
Our marketing website (workmatecrm.com) may use minimal first-party cookies for analytics purposes to understand how visitors interact with our site. No personal information is collected through these cookies.
8. Children's Privacy
The Service is intended for use by business owners and contractors who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have collected information from a minor, please contact us immediately and we will delete it.
9. International Data Transfers
Our infrastructure and third-party providers may process and store your data in countries other than your own, including the United States. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws to those in your jurisdiction.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification to the address associated with your account.
Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: