Privacy Policy.

1. Who we are

WorkOfficially Inc., a Delaware (United States) corporation ("we", "our", or "WorkOfficially"), is responsible for the personal information processed through the WorkOfficially marketplace. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have over it.

2. What we collect

Information you give us. Name, email, phone number, profile details (headline, overview, portfolio, skills, hourly rate, location, languages), files you upload, messages you send on the platform, job posts and proposals, contract and dispute evidence, and anything you type into our AI assistant.

Identity verification (KYC). When you verify your identity you give us your legal name, date of birth, address, document type and issuing country, and you upload photos of the front and back of a government ID and a selfie holding a one-time code. These are stored on our own servers in private storage. They are not sent to an outside identity-verification company: authorised WorkOfficially reviewers check them by hand. Only you and those reviewers can open them, and they are deleted when your account is deleted.

Payment data. Card details are entered into Stripe's secure payment form and never reach our servers. We keep the card brand, the last 4 digits and the expiry date for your receipts. Plans bought inside our Android app are paid through Google Play; Google handles the payment and we receive only a purchase token.

Payout details. The bank, PayPal or Wise details you enter for withdrawals are stored encrypted on our servers and used only to pay your withdrawals.

Usage and device data. When you use the site we record your IP address, your browser and device type (read from your browser's user agent), your country (supplied by our network provider, Cloudflare), the pages you open, the site that referred you (without its query string), and the response time. For signed-in visits we also record your account id. Our pages send the screen size, pixel ratio, time zone, language and, on browsers that provide it, the device model. If you leave the signup or profile form without submitting it, we record the name of the last field you were on, never what you typed. A first-party cookie (wo_vid) gives your browser a random visitor number so we can see how visitors move from the home page to signing up. We use this data to keep the service secure, find and fix problems, and understand which pages work. We do not sell it, use it for advertising, or load any third-party advertising or analytics trackers. You can switch off the optional analytics part (the visitor number, the device details and the form tracking) in Cookie settings; security logging continues.

Phone verification and SMS. If you add a phone number, we send it to Twilio to check the number type and to send verification codes, and, if you turn them on, SMS sign-in codes and notifications.

Video calls. Calls connect directly between the two browsers. We pass the connection set-up messages through our servers and delete them after 5 minutes. To find a route between the two browsers, each browser contacts a Google STUN server, which sees its IP address.

Security records. Sign-in attempts (with IP address and browser), and requests that look like attacks, are logged to protect accounts.

Cookies. See Section 5 and our Cookie Policy.

2b. Reputation Bridge data

If you submit a Reputation Bridge import (currently from Upwork, Fiverr, Toptal, Freelancer.com or LinkedIn), we read the public profile URL you give us, or the profile text or export you paste or upload. We extract your displayed name on that platform, your rating, your review count, each review's text, each reviewer's first name and initial, each review's date and, where shown, the jobs and amounts. Pasted profile text may be sent to one of our AI providers (Section 4b) to pick out these fields. We do not request or use any private data from the source platform.

A WorkOfficially Reputation team member checks the import by hand against your live source profile before approving it. The approved data is shown on your WorkOfficially profile. You can remove any imported source at any time; removed data is kept for 90 days for fraud investigation and then deleted.

3. How we use it

• To operate the marketplace: match talent to jobs, run contracts, take payments, hold escrow, pay withdrawals and issue invoices.
• To verify identities and prevent fraud.
• To send service emails: signup, password resets, milestones, disputes, reviews. You cannot opt out of essential service email while you have an account.
• To keep the service secure, find problems, and understand how the platform is used (Section 2, "Usage and device data").
• To respond to legal process and protect our users.

3b. Legal bases for processing

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the marketplace you signed up for, and to run contracts, payments and escrow); legal obligation (identity checks, tax and accounting records); legitimate interests (security, fraud and abuse prevention, understanding and improving the service, and service communications, balanced against your rights; you can switch the optional analytics off in Cookie settings); and consent where we ask for it. You may object to processing based on legitimate interests as described in Section 8.

4. Sharing & disclosure

We share your data only with:

• Service providers that run parts of the service for us, listed in Section 4b, each only for that purpose.
• Other users: your public profile is visible to other users. Inside a contract, the other party sees your name, your verification status and your messages.
• Apps you connect: if you sign in to an app with WorkOfficially or connect an AI tool to your account, it receives what you approved on the consent screen. You can disconnect it at any time under Settings, Connected apps.
• Legal authorities, when required by valid legal process.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

4b. Service providers

These companies process data for us. Each is named here so you know who can see what.

We update this list when providers change. Material additions are announced 14 days in advance by email and on this page.

5. Cookies & analytics

We use a small number of first-party cookies: one to keep you signed in, one optional analytics visitor number, and a few that remember your choices. We do not use advertising cookies, Google Analytics or the Facebook pixel. The full list, with what each one does and how long it lasts, is in our Cookie Policy. You can turn the optional analytics off at any time in Cookie settings. If your browser sends a Global Privacy Control signal, we treat it as that choice.

6. Retention

We keep your account data while your account is open. Specific records are kept for these periods, after which they are deleted automatically:

• Page-visit records (IP address, browser, device, pages): 90 days.
• Security records of requests that looked like attacks: 30 days. Failed sign-in records: 14 days.
• Signup-journey records: the IP address is removed after 90 days. Cached IP location lookups: 90 days.
• AI request logs: 90 days. Your AI assistant conversations: kept with your account.
• Records of what staff did in the admin tools: 365 days.
• Video-call connection messages: 5 minutes. Work-diary screenshots: 90 days after the contract ends.

When you delete your account (from Your data & privacy, after a 30-day grace period), we remove your name, email, phone, password, profile, identity documents, payout details and AI assistant conversations, and remove the IP address and device details from your page-visit and signup records. We keep the records other people and the law rely on: contracts, milestones, invoices, payments and payouts, reviews, disputes, and the messages you exchanged with other users, linked to a "Deleted user" placeholder.

7. Security

We protect your data with:

• Passwords hashed with Argon2id and a secret pepper; we never store your password itself.
• TLS encryption for every connection to the site.
• Two-factor sign-in with an authenticator app or SMS, plus one-time backup codes. Authenticator secrets and payout details are encrypted at rest.
• Identity documents in private storage that cannot be reached from the web; only you and authorised reviewers can open them.
• Staff access to personal data limited to the roles that need it, with two-factor protection on the admin tools.

To report a security problem, email [email protected].

8. Your rights

Subject to the law that applies to you (for example the GDPR or California law) you can:

• Access your personal data and get a copy. Signed-in members can download it themselves at Your data & privacy.
• Correct inaccurate data.
• Delete your account and data (see Section 6 for what has to be kept).
• Port your data to another service in a structured format.
• Object to processing that is not required to run the marketplace, including the optional analytics.
• Withdraw consent at any time where processing is based on consent.

Send requests to [email protected]. We respond within 30 days.

8b. Automated decisions

WorkOfficially does not make significant decisions about your account by automated processing alone. Fraud signals and AI suggestions may flag an account for review; a person on our team makes the final call before any restrictive action (suspension, identity-verification refusal, dispute decision, Reputation Bridge approval).

8c. California notice at collection and privacy rights

If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you these rights. In the last 12 months we collected these categories of personal information, from you, from your browser and device, and from the providers in Section 4b:

• Identifiers: name, email, phone number, account id, IP address, the visitor number in our analytics cookie.
• Customer and commercial records: contracts, payments, payouts, plans and invoices; card brand and last 4 digits.
• Internet or other electronic activity: pages visited, referring site, browser and device details, sign-in records.
• Approximate geolocation: your country, worked out from your IP address. We do not collect precise location.
• Professional information: your profile, work history, reviews and imported reputation.
• Sensitive personal information: government ID images, date of birth and a selfie (for identity verification), and your account password. We use these only to verify your identity and secure your account, not to infer anything about you.

We use them for the purposes in Section 3 and keep them for the periods in Section 6. We do not sell your personal information and do not "share" it for cross-context behavioural advertising, so there is nothing to opt out of; we also honour the Global Privacy Control signal as a request to switch off the optional analytics. We do not knowingly sell or share the personal information of anyone under 16.

You have the right to know what we collected and how we use it, to get a copy, to correct it, and to delete it, and the right not to be treated differently for using these rights. Send requests to [email protected]; we will confirm your identity using your account email before acting. An authorised agent may make a request for you with your signed permission.

9. Where your data is processed

WorkOfficially is a United States company and our servers are in the United States. If you use WorkOfficially from outside the United States, your information is transferred to and processed in the United States, and some of our providers process it in other countries. Where the law of your country requires a transfer safeguard, we rely on Standard Contractual Clauses or another valid transfer mechanism.

9b. Data-breach notification

If we suffer a personal-data breach that is likely to put your rights at risk, we will notify the authorities the law requires us to, within the time it sets (72 hours under the GDPR). If the breach is likely to put you at high risk, we will also tell you directly without undue delay: what happened, what data was affected, what we are doing about it, and what you can do.

10. Children

WorkOfficially is not intended for anyone under 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy. Material changes are announced by email and on this page at least 14 days before they take effect.

12. Contact

Privacy questions and requests: [email protected]
Data Protection Officer: [email protected]

© WorkOfficially Inc. · v1.41 · Effective October 19, 2026