Privacy Policy

This Privacy Policy explains how WebWork CRM LLC ("we", "us") collects, uses, and protects personal information when you visit our websites, sign up for the Service, or use the platform. It covers two distinct roles:

• Information about our customers (the field-service businesses that create accounts), where we act as a data controller.
• Information our customers store about their own customers ("Customer Data"), which we process on their behalf and at their direction.

1. Information we collect

From you directly

• Account details: name, work email, phone, company name, industry, and password (stored only as a salted hash — we never see or store the plain text).
• Billing details when you subscribe to a paid plan.
• Demo/contact form submissions: name, company, email, phone, and message.

Automatically

• Service logs: IP address, browser/user-agent, request metadata — used for security (e.g., rate limiting, account-lockout protection) and troubleshooting.
• Essential cookies for authentication and security (e.g., session and CSRF tokens). We do not use third-party advertising cookies.

Customer Data you store in the Service

Names, addresses, contact details, service history, notes, photos, and payment records of your customers. You control this data; we process it solely to provide the Service.

2. How we use information

• To provide, secure, and improve the Service.
• To send transactional email (welcome, password reset, invoices, receipts, portal invitations) — these are required for the Service to function.
• To respond to support and sales inquiries.
• To comply with legal obligations.

We do not sell personal information.

3. Service providers

We share data with a small set of processors strictly to run the Service — hosting and database, transactional email, payment processing, file storage, and error monitoring. The current list, with each provider's purpose and location, is published at /subprocessors. For business customers subject to data-protection laws, our Data Processing Addendum governs this processing.

The Service is hosted in the United States; by using it you understand your data is processed in the U.S.

4. Security

• Encryption in transit (TLS) for all traffic.
• Passwords hashed with a modern memory-hard algorithm (Argon2id); integration credentials encrypted at rest.
• Strict tenant isolation: each company's data is scoped to that company at the database layer.
• Access controls, audit logging, and rate limiting throughout the platform.

5. Data retention & deletion

Account and Customer Data is retained while your subscription is active. After cancellation or trial expiry, data is retained for at least 30 days for export, then may be deleted from production systems. You can request deletion sooner — or an export at any time — by contacting support@webworkcrm.com.

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, or to object to certain processing. Contact us and we will respond within 30 days. If you are a customer of one of the businesses using our Service, please contact that business directly — we will assist them in fulfilling your request.

7. Children

The Service is for businesses and is not directed to children under 16.

8. Text messaging (SMS)

With your consent, we and the field-service businesses using our Service send service-related text messages — for example appointment reminders and confirmations, "technician on the way" and job-completion notifications, invoice and payment reminders, and replies to messages you send us.

• Consent. You opt in by providing your mobile number and agreeing to receive texts — on a website or paper form, verbally when scheduling service, or by texting us. Consent to receive texts is not a condition of any purchase.
• Message frequency varies with your account activity and service schedule.
• Message and data rates may apply, according to your mobile carrier plan.
• Opt out at any time by replying STOP to any message; reply HELP for help. Mobile carriers are not liable for delayed or undelivered messages.
• We never sell your information, and mobile opt-in and consent data is never shared with third parties or affiliates for their own marketing or promotional purposes. Your mobile number is shared only with the service providers that help us deliver these messages (such as our SMS/telecom provider), and solely for that purpose.

9. Changes

We will notify you of material changes to this policy by email or in-product notice before they take effect.

10. Contact

Privacy questions or requests: support@webworkcrm.com.