Privacy Policy

Last updated: June 9, 2026

1. Introduction

Verified Workflows Inc. ("Verified Workflows", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Data We Collect

We collect the following categories of personal data:

Category	Data Points
Account Data	Name, email address, password hash, role, account creation date
Usage Data	Tasks submitted, tasks reviewed, certifications earned, login history
Payment Data	Stripe customer ID, billing transactions, payout records (processed by Stripe)
Technical Data	IP address, browser type, device information, cookies
Content Data	Task payloads, review results, corrections submitted by reviewers

3. How We Use Your Data

Service delivery: Processing tasks, routing reviews, delivering results via webhooks
Authentication: Verifying identity, managing sessions, securing accounts
Payments: Processing billing, issuing payouts to reviewers
Communication: Sending transactional emails (verification, password reset, task notifications)
Improvement: Analyzing aggregated, anonymized data to improve the platform
Compliance: Meeting legal obligations, enforcing our Terms of Service

4. Data Sharing

We share your data only with the following categories of service providers and only as necessary:

Stripe: Payment processing for client billing and reviewer payouts
Wise (TransferWise): International payout processing for reviewers
Resend: Transactional email delivery
Cloud infrastructure: Hosting and data storage providers

We do not sell your personal data to third parties. All service providers are bound by data processing agreements.

5. Data Retention

Account data: Retained for the duration of your account plus 30 days after deletion request
Task data: Retained for 2 years after task completion, then anonymized
Billing records: Retained for 7 years as required by tax regulations
Email logs: Retained for 90 days
Server logs: Retained for 30 days

6. Your Rights

Depending on your jurisdiction, you have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your account and data ("right to be forgotten")
Export: Request a machine-readable export of your data
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing based on legitimate interests
Portability: Receive your data in a structured, commonly used format

To exercise these rights, use the GDPR data controls or contact us at privacy@verifiedworkflows.com.

7. Cookie Policy

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies. See our Cookie Policy for details.

8. GDPR Compliance

For users in the European Economic Area (EEA):

Our legal basis for processing is contract performance (providing the Service) and legitimate interests (platform security and improvement).
You have the right to lodge a complaint with your local supervisory authority.
We have appointed a Data Protection Officer contactable at dpo@verifiedworkflows.com.
International data transfers are protected by Standard Contractual Clauses.

9. Data Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, regular security audits, and secure development practices. However, no system is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We will notify you of material changes via email or platform notice at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related inquiries:
Email: privacy@verifiedworkflows.com
Data Protection Officer: dpo@verifiedworkflows.com
Address: Verified Workflows Inc., San Francisco, CA