Workflex

Privacy Policy

Effective Date: 2026-10-10
Last Updated: 2026-10-10

1. Introduction

Welcome to Workflex. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we look after your personal data when you visit our website or use our services, and tells you about your privacy rights and how the law protects you.

Workflex operates in strict compliance with the General Data Protection Regulation (GDPR). Our core philosophy regarding data is data minimization: we never collect more data than is strictly necessary to deliver our services.

2. Who We Are (Data Controller)

Workflex is the data controller and is responsible for your personal data.

• Company Name: Workflex
• Registered Address: E.U.
• Contact Email: privacy (@t) workflex.app

3. The Data We Collect About You

To provide our services —which include server-side application development and consulting in Technology and AI systems infrastructure— and we collect only the absolute minimum data required:

• Identity Data: First name, last name (of client contact persons).
• Contact Data: Email address, telephone number, billing address.
• Financial Data: Payment details necessary for invoicing and accounting, stored as reference to a payment provider, not actual cards details.
• Technical & Service Data: Information strictly related to the infrastructure, AI systems, and servers we are developing or consulting on for your business. Note: We act as a Data Processor for any end-user data you host on infrastructure we manage; this is governed by our Data Processing Agreement (DPA).

We do not collect any Special Categories of Personal Data (e.g., ethnicity, religion, health data) unless explicitly required for a specific AI infrastructure project and covered under a separate, specialized agreement.

4. How We Use Your Data and Legal Basis

Under GDPR, we will only use your personal data when the law allows us to. Most commonly, we will use your data in the following circumstances:

• Performance of a Contract: Processing your data where it is necessary for the performance of a contract to which you are a party (e.g., delivering software, providing consulting).
• Legitimate Interests: Where it is necessary for our legitimate interests (e.g., managing our relationship with you) and your interests and fundamental rights do not override those interests.
• Legal Obligation: Where we need to comply with a legal or regulatory obligation (e.g., retaining tax and invoice records).

5. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to others. We may share your data with trusted third parties solely for the purpose of running our business:

• IT and cloud service providers (e.g., hosting platforms used for development) when mandated by you.
• Professional advisers (lawyers, bankers, auditors, insurers).
• Government or tax authorities as required by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with the GDPR.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We limit access to your personal data to those employees, agents, and contractors who have a business need to know.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Legal Rights Under GDPR

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data (Data Portability).
• Right to withdraw consent (if consent is the legal basis for processing).

To exercise any of these rights, please contact us at privacy (@t) workflex.app. You also have the right to make a complaint at any time to your local supervisory authority for data protection issues.