Privacy, in plain English

Workkk is a digital-workplace and consent-forward work-monitoring product operated by Workkk (“Workkk”, “we”, “us”), registered at Gujarat, India. This policy covers our marketing website at workkk.tech and the Workkk product (the web workspace and desktop agent).

For the product, your employer is the data controller and decides what is collected within the limits below; Workkk acts as their data processor. For the marketing site, Workkk is the controller. Questions? Email [email protected].

On the marketing site (workkk.tech):

• No third-party analytics, advertising or tracking scripts.
• Essential cookies for the site to function; no advertising trackers.
• Details you submit - name, email, company and message via the contact form.
• Signup details - company name, workspace slug, owner email and seat count.

In the product (controlled by your employer):

• Presence & status - working, idle, break, meeting, offline.
• Work timers & attendance - active/idle time, daily timeline.
• Screenshots - only with consent, at a configurable interval, taken only while the employee is checked in and working, and visible to the employee they belong to.
• App & website usage - which apps and sites are in use. Keyboard and mouse activity is counted to measure active time; what you type is never recorded.
• Account & billing data - for workspace administration.

Monitoring is designed to be something people trust. The desktop agent asks each employee to read and accept a monitoring agreement, and records that acceptance (version and time). The agent shows the employee’s own status, timer and screenshots.

• Employees can see their own timeline, screenshots and activity at any time.
• Scheduled screenshots run only while the employee is checked in and working - never on a break or after check-out.
• Remote control of a computer starts only after the employee approves it.
• Employees may raise access, correction or deletion requests; because your employer is the controller, we route these to them and assist as their processor.

We use information to:

• Provide the living office, presence, timers and requested product features.
• Provision workspaces, process signup, and operate billing.
• Respond to contact and support requests.
• Keep the service secure, prevent abuse, and meet legal obligations.

Our legal bases include performing our contract with you, the legitimate interests of operating and securing the service, consent (for product monitoring and non-essential cookies), and compliance with law.

We do not sell personal data. We share it only with vetted sub-processors that help us run the service under contract - for example hosting and network protection, email delivery and payments - and where required by law. The current list of sub-processors is published on our Security page.

We keep personal data only as long as needed for the purposes above. Product retention (including screenshots and activity) depends on your employer’s plan and settings, and is deleted on request or when a workspace is closed. Marketing and contact data is kept for a reasonable period and then deleted.

We protect data with HTTPS encryption in transit, bcrypt-hashed passwords, workspace isolation, role-based access and authenticated, permission-checked access to screenshots and files. See our Security page for details and our roadmap. No system is perfectly secure, but we work to keep your data safe and to notify you of material incidents as required by law.

Data may be processed in countries other than yours. Where it is, we use appropriate safeguards (such as standard contractual clauses) so your data remains protected under Gujarat, India and applicable law.

Depending on where you live (e.g. under GDPR or CCPA/CPRA) you may have rights to access, correct, delete, port or object to the processing of your personal data, and to withdraw consent. To exercise them, contact [email protected]. If your data is in the product, we’ll coordinate with your employer as the controller. You may also complain to your local data-protection authority.

Workkk is a workplace product and is not directed to children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy as the product evolves or the law changes. We’ll revise the “last updated” date above and, for material changes, provide a more prominent notice.

Privacy questions or requests: [email protected]. General support: [email protected]. Postal: Workkk, Gujarat, India.