Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

Last updated September 20, 2026

Data Security

We use industry-standard encryption and security measures to protect your data.

Transparency

We're transparent about what data we collect and how we use it.

Your Rights

You have full control over your data and can request changes anytime.

Information We Collect

Account Information

When you create an account, we collect your email address and encrypted password. This information is necessary to provide you with access to our services.

Project Data

We store the project information you create, including project names, descriptions, time entries, and financial data. This data is essential for the functionality of our freelance management platform.

Usage Information

We collect information about how you use our service, including features accessed, pages viewed, and actions taken. This helps us improve our platform.

Your Clients' Contact Information

When you generate or send an invoice or contract, you may provide your client's email address and name. We store this information solely to deliver the invoice or contract on your behalf and to track delivery status (sent, delivered, opened, clicked). We do not market to your clients, never share their addresses with third parties, and your clients can unsubscribe at any time via the link in every email they receive from us.

How We Use Your Information

Service Provision

We use your information to provide, maintain, and improve our freelance management services, including project tracking, invoice generation, and analytics.

Communication

We may use your email address to send you important updates about our service, security notifications, and responses to your inquiries.

Email Delivery & Engagement Tracking

For invoice and contract emails you send through Workey, we use a transactional email provider (Resend) to deliver the message and record delivery events (delivered, opened, clicked) so you can see whether your client received and engaged with the invoice. We do not record the body of replies — replies go directly to your own email inbox via Reply-To. Clients can opt out at any time using the unsubscribe link in every email.

Platform Improvement

We analyze usage patterns to understand how our platform is used and to identify areas for improvement and new feature development.

Data Protection & Security

Encryption

All data is encrypted in transit using HTTPS and at rest using industry-standard encryption protocols.

Access Controls

We implement strict access controls to ensure that only authorized personnel can access your data, and only when necessary for service provision.

Regular Security Audits

We conduct regular security audits and assessments to identify and address potential vulnerabilities in our systems.

Your Rights & Choices

Data Access

You can access and review all of your personal data through your account dashboard at any time.

Data Correction

You can update or correct your personal information directly through your account settings or by contacting our support team.

Data Deletion

You can request deletion of your account and associated data at any time. We will process such requests within 30 days.

Data Portability

You can export your data in a structured format. Contact our support team for assistance with data export requests.

Data Sharing & Third Parties

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

Service providers who assist us in operating our platform (all bound by confidentiality agreements)
When required by law or to protect our rights and the safety of our users
In the event of a business transfer, merger, or acquisition (with prior notice to users)

Cookies & Tracking

We use essential cookies to keep you signed in and to remember your preferences. We also use Google Analytics to understand how the site is used, and Google Ads to measure whether an advert led to a signup. Every cookie we set is listed in our cookie policy.

Essential Cookies

These are necessary for the website to function and cannot be switched off. They include authentication tokens and session management.

Analytics & Advertising Cookies

In the EEA, the UK and Switzerland these are set only if you accept them, and nothing is stored until you choose. Elsewhere they are on by default. You can change your choice at any time from the cookie policy page. We do not sell this data or use it to identify you personally.

How Long We Keep Your Data

We keep your account and its contents for as long as your account is open. If you close your account we delete your content within 30 days, except records we must keep for tax, accounting or legal reasons, which we keep for as long as the law requires. Analytics data is retained for 14 months.

Where Your Data Is Processed

Our infrastructure providers may process and store data outside your country, including in the United States. Where personal data leaves the EEA or the UK, that transfer relies on the European Commission's standard contractual clauses or an equivalent safeguard offered by the provider. Our sub-processors are listed in the data processing agreement.

AI Features

Workey AI and AI Insights send the content of your request — for example a project name, an amount or a client name — to a third-party AI model provider so it can be processed, and the result is returned to you. This happens only when you use one of those features. Your content is not used to train any model.

Your Rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict how we use it, and withdraw consent you have given. You can export your data yourself from your profile page at any time, and exercise any of these rights by emailing support@getworkey.com. We respond within 30 days and do not charge for this.

If you are in the EEA or the UK and believe we have handled your data improperly, you may also complain to your national data protection authority.

Who Is Responsible For Your Data

Best Programming LLC, established in Jordan (Amman/Jordan), is the data controller for the personal data described in this policy. For your clients' personal data that you store in Workey, you are the controller and we act as your processor under the data processing agreement.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: support@getworkey.com

We are committed to resolving any privacy concerns promptly and will respond to your inquiries within 48 hours.

This privacy policy is effective as of the date listed above and may be updated from time to time. We will notify users of any material changes via email or through our platform.