Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: Name, email address, company name, and contact details provided during registration
• Usage data: Information about how you use the Service, including pages visited, features used, and interaction patterns
• Uploaded documents: Construction documents, drawings, and specifications you upload for processing
• Payment information: Billing details processed securely through our third-party payment providers
• Technical data: IP address, browser type, device information, and cookies

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process your documents using our AI systems
• Process payments and manage your account
• Communicate with you about the Service, updates, and support
• Ensure the security and integrity of the Service
• Comply with legal obligations

3. Legal Basis for Processing

Under the UK GDPR, we process your personal data on the following legal bases:

• Contract: Processing necessary to perform our contract with you
• Legitimate interests: Improving our Service, preventing fraud, and ensuring security
• Consent: Where you have given specific consent for certain processing activities
• Legal obligation: Where processing is required by law

4. Data Storage and Security

Your data is stored on secure servers within the United Kingdom. We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security assessments.

5. Third-Party Services

We use the following third-party services that may process your data:

• Payment processors: For secure payment handling (Stripe, Revolut)
• AI services: For document analysis and processing (Anthropic)
• Cloud hosting: For infrastructure and data storage
• Email services: For transactional communications

Each third party is bound by data processing agreements and processes data only as necessary to provide their services.

6. Your Rights (UK GDPR)

Under the UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing of your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at privacy@workmaite.com.

7. Cookies

We use essential cookies required for the Service to function correctly, including session management and security tokens. We do not use third-party tracking or advertising cookies. For more information, see our cookie preferences within the Service.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Uploaded documents are retained according to your account settings. Upon account closure, we will delete or anonymise your data within 90 days, except where retention is required by law.

9. International Transfers

Where your data is processed outside the United Kingdom, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, in compliance with UK GDPR requirements.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact and Data Protection Officer

For privacy-related enquiries or to exercise your rights, please contact our Data Protection Officer:

• Email: privacy@workmaite.com
• Post: WorkmAIte, Data Protection Officer, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.