Privacy Policy

1. Scope and our role

This Policy applies when you visit our website, request information, attend a demonstration, create or use an account, communicate with us, or interact with a WorqEasy workflow. It also applies to personal data processed through authorized integrations, including messaging, mapping, identity, storage, analytics and cloud infrastructure services.

For website enquiries, account administration and our own business operations, WorqEasy generally acts as the controller of personal data. When an organization uses WorqEasy to manage its teams, workers, contractors, visits, inspections, assignments or field operations, that organization is normally the controller and WorqEasy acts as its processor or service provider. The organization determines why data is processed and is responsible for appropriate notices, lawful basis, access and responses to its people.

2. Personal data we may collect

Depending on use, we may process identity and contact data; organization and account data; assignments, forms, responses, timestamps, notes, approvals and status signals; a location actively shared by a user; site locations, photographs, video, audio, documents, signatures and metadata; messaging content and delivery status; device, browser, IP, usage, authentication, diagnostic and security data; commercial enquiries, support and transaction records; and data supplied by an employer, administrator, integration, partner or public business source.

We do not claim to continuously track a person unless a specifically enabled feature and an appropriate notice clearly state otherwise. Do not submit sensitive or special-category data unless necessary, lawful, authorized and protected by appropriate safeguards.

3. How we collect data

We collect data directly from you; from the organization that provides your access or assigns work to you; automatically from your browser, device and use of the Services; and from integrations you or your organization choose to connect. If you provide personal data about another person, you must be authorized to do so and provide any notice required by law.

4. Purposes and legal bases

We process data to provide, secure and administer the Services; authenticate users; deliver operational workflows and communications; record evidence and generate customer-authorized reports and metrics; respond to enquiries and support; maintain reliability; prevent fraud and misuse; comply with law; enforce agreements; improve usability and performance; and communicate about requested demonstrations or service changes.

Where law requires a legal basis, we rely as applicable on performance of a contract, legitimate interests not overridden by individual rights, legal obligations, vital interests or consent. Consent may be withdrawn without affecting earlier lawful processing. We do not sell personal data or use customer operational content for third-party behavioral advertising.

5. Customer instructions and workforce data

For data processed on behalf of a customer, we act on documented instructions, including customer configuration and authorized user actions, unless law requires otherwise. Requests about employment records, assignments, workplace monitoring, location evidence or operational submissions should usually be directed first to the organization that provided the workflow. We assist that organization as required by contract and law.

6. Service providers and integrations

We may disclose data to vetted providers supporting hosting, storage, databases, security, authentication, communications, mapping, analytics, support and professional services. They may process data only for agreed purposes and under appropriate confidentiality, security and data-protection obligations.

Customer-enabled services may include Amazon Web Services or other cloud infrastructure; Meta products such as WhatsApp Business; and Google identity, maps, analytics, workspace or cloud services. Use is also governed by the provider’s terms. We request only needed permissions and provide a way to disconnect or request deletion where applicable. Listing a provider does not mean it is used for every customer or region.

We may also disclose data to advisers, auditors, insurers, authorized customer administrators, a genuine corporate successor or public authorities acting under valid legal process.

7. International transfers and data location

WorqEasy and its providers may process data in the United Arab Emirates and other countries where they operate. Where a restricted transfer occurs, we use a mechanism required by applicable law, such as an adequacy decision, approved or standard contractual clauses, transfer assessments, customer instructions, valid consent or another lawful exception. Any purchased regional hosting or data-residency commitment will be stated in the applicable customer agreement.

8. Data retention

We retain personal data only as long as reasonably necessary for its purpose, the Services, contractual commitments, disputes, security and legal, accounting or regulatory obligations. Account and operational data is generally retained for the subscription term and a limited period afterward for export, recovery or deletion. Security logs, support records and backups may have separate limited schedules. When no longer required, data is deleted, anonymized or securely isolated, subject to lawful retention and backup cycles.

9. Security

We maintain risk-based technical and organizational safeguards designed to protect confidentiality, integrity and availability. These may include encryption, least-privilege access, authentication controls, logging, monitoring, secure development, vulnerability management, backups, incident response, personnel confidentiality and provider due diligence. No system is completely secure; users must protect credentials and devices and report suspected misuse.

10. Cookies and similar technologies

We may use technologies necessary for authentication, security, language preferences and service operation. If we introduce non-essential analytics or advertising technologies where consent is required, we will provide choices before activating them. Blocking some technologies can affect functionality.

11. Reports and automated processing

The Services may organize submitted data into dashboards, alerts, summaries, metrics or reports under customer-defined rules. Unless expressly stated for a feature, WorqEasy does not make solely automated decisions producing legal or similarly significant effects. Customers must apply human review before using operational information for employment, disciplinary, safety or other consequential decisions.

12. Your privacy rights

Subject to applicable law and our role, you may request access, correction, deletion, restriction, objection, withdrawal of consent, portability, or information about processing and international transfers. You may also complain to the competent authority. Rights vary and exemptions may apply.

We respect applicable rights in the UAE, Saudi Arabia, Qatar, Oman, Bahrain, Kuwait, the EEA, the United Kingdom and other jurisdictions, applying the relevant regime rather than treating all laws as identical. If we process data for a customer, we may refer the request to that customer.

13. Exercising rights and deleting data

Email privacy@worqeasy.com with the subject “Privacy Request” and identify the account, workspace or communication concerned. You may also contact contact@worqeasy.com. We may verify identity and authority before acting and respond within the period required by law. For data connected through Meta or Google, identify the connected account so we can process the request or coordinate with the relevant customer.

14. Children

The Services are intended for organizations and authorized working-age users, not children. We do not knowingly collect children’s data through the public website. A customer must not enable a child to use a workflow unless lawful, necessary, appropriately disclosed and supported by required guardian authorization.

15. Changes to this Policy

We may update this Policy for changes in Services, providers or legal obligations. We will publish the revised version and date and provide additional notice where a change is material.

16. Contact and complaints

Send privacy questions, requests or complaints to privacy@worqeasy.com or Skyminds Cloud Computing Services L.L.C — O.P.C, Abu Dhabi, United Arab Emirates. If dissatisfied, you may contact the competent privacy or data-protection authority in your jurisdiction.