Privacy Policy

1. Introduction

Your information stays confidential. We don't sell it. We don't share it except with the tools we use to build your systems. Here's exactly how we handle your data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, work-smart.ai (the "Site"), and use our services. Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Site or services.

2. Information We Collect

We collect information in the following ways:

A. Information You Provide Directly

When you interact with Work-Smart.ai, we may collect:

• Contact Information: Name, email address, phone number, company name, and job title
• Assessment Responses: Answers to our AI Ops Assessment, including details about your current data systems, tools, team size, revenue range, and operational challenges
• Inquiry Information: Any information provided when you contact us via email, phone, contact form, or calendar booking
• Communication Records: Contents of emails, chat messages, and support requests

B. Information Collected Automatically

When you visit our Site, we automatically collect:

• Website Analytics: Pages visited, time spent on pages, links clicked, referral source, browser type, operating system, IP address (anonymized)
• Cookies: Analytical and performance cookies to understand how you use our Site. We do not use advertising or tracking cookies.
• Device Information: Device type, screen resolution, and other technical details

C. Third-Party Information

We may receive information from:

• Email service providers when you correspond with us
• Analytics platforms that measure Site performance

3. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide the services you request
• Deliver assessment results and recommendations based on your responses
• Send follow-up communications about our services, only to those who have opted in
• Improve our Site and services by understanding user behavior and preferences
• Comply with legal obligations and enforce our agreements
• Prevent fraud and ensure security of the Site
• Measure website performance through anonymized analytics

We do not use your information for advertising purposes, and we do not sell your personal data to third parties.

4. Data Sharing and Disclosure

We share your information only in these circumstances:

Service Providers

We use third-party services to deliver our business. These providers are contractually obligated to protect your information:

• Supabase: Our database provider (independently audited and verified security standards). Stores customer data, assessment responses, and engagement records.
• Resend: Our email service provider. Handles transactional and follow-up emails.
• Google Analytics: Measures Site traffic (anonymized IP addresses, no personally identifiable data).
• Cloudflare Turnstile: Invisible CAPTCHA service for form spam protection. Does not use cookies or track users.
• Prerender.io: Serves pre-rendered pages to search engines for SEO purposes. Does not process or store personal data.

Legal Requirements

We may disclose your information if required by law, court order, or government request, to the extent permitted or required.

Business Transfer

If Work-Smart.ai is acquired or merged, your information may be transferred as part of that transaction. You will be notified of any change in ownership or use of your information.

Your Consent

We will not share your information for purposes other than those listed above without your explicit consent.

5. Data Storage and Security

Where We Store Your Data

Your information is stored in Supabase, a cloud database provider certified to SOC 2 Type II standards. Supabase uses industry-standard encryption (TLS/SSL) that protects your data in transit and implements industry-standard security measures.

How We Protect Your Data

• Data is encrypted at rest in our database
• Access to personal information is restricted to authorized personnel only
• We do not store credit card or banking information
• We implement firewalls, access controls, and regular security audits

Data Retention

We retain your information for as long as necessary to:

• Provide services to you
• Comply with legal obligations
• Resolve disputes

Specific retention periods:

• Assessment responses: 2 years from submission, or until you request deletion
• Contact form inquiries: 1 year from submission
• Newsletter subscriptions: Until you unsubscribe
• Client engagement data: Duration of engagement plus 3 years (for legal and tax purposes)
• Website analytics: 26 months (Google Analytics default, anonymized)

You can request deletion of your data at any time (see "Your Rights" below).

6. Your Rights and Choices

Access and Deletion

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (right to be forgotten)
• Download your information in a portable format

To exercise these rights, contact us at ignacio@work-smart.ai. We will respond within 30 days.

Email Communications

You can opt out of promotional or follow-up emails by clicking the unsubscribe link in any email we send. This does not prevent transactional emails related to services you've requested.

Cookies

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Site.

CCPA (California Privacy Rights)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale or sharing of your information

Work-Smart.ai does not sell personal information. To exercise CCPA rights, contact ignacio@work-smart.ai.

GDPR (European Privacy Rights)

If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access, correct, or delete your data
• Right to restrict processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with your local supervisory authority

Legal basis for processing: We process your data based on (a) your consent (assessment responses, newsletter signup), (b) legitimate interest (responding to inquiries, improving our services), or (c) contractual necessity (delivering services you have engaged us for).

International data transfers: Your data may be processed in the United States, where our services operate. We rely on standard contractual clauses and data processing agreements with our service providers to ensure adequate protection.

For GDPR-related requests, contact ignacio@work-smart.ai. We will respond within 30 days.

7. Cookies and Tracking

What Cookies We Use

• Analytics Cookies: Google Analytics (anonymized IP addresses, no personally identifiable data). Used to understand which pages are visited, how long visitors spend, and where traffic comes from. Retention: 26 months.
• Functional Cookies: To remember your preferences and login status (if applicable). These are first-party cookies essential for Site functionality.

What We Do Not Use

We do not use advertising cookies, retargeting pixels, third-party marketing cookies, or social media tracking scripts. We do not participate in any ad network or data broker ecosystem. Cloudflare Turnstile (our CAPTCHA service) operates without cookies.

Your Cookie Preferences

You can disable cookies in your browser settings. Disabling analytics cookies will not affect your ability to use the Site. Disabling functional cookies may affect certain features like form submissions.

On your first visit, a cookie consent banner will allow you to accept or decline non-essential cookies. Your preference is stored for 12 months.

8. Children's Privacy

Our Site and services are not directed to children under 13. We do not knowingly collect information from children. If we become aware that we have collected information from a child under 13, we will delete it immediately.

9. Third-Party Links

Our Site may contain links to external websites and services. This Privacy Policy applies only to our Site. We are not responsible for the privacy practices of external sites. Please review their privacy policies before providing information.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by email or by updating the "Last Updated" date on this page. Your continued use of the Site constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, your privacy rights, or how we handle your information, contact:

We will respond to privacy inquiries within 30 days.