Privacy Policy

How this policy applies

This policy explains how WRKZY handles personal data for website visitors, early access applicants, workspace users, and customer conversation data processed for client workspaces. For data that a client imports, creates, or receives in its workspace, the client generally controls the purpose of processing and WRKZY provides the CRM service on the client's instructions.

Data we collect or process

• Account data such as name, email address, role, login, and authentication information.
• Workspace data such as company name, users, roles, settings, tags, assignments, notes, and audit logs.
• Early access and support data submitted through forms, email, or support requests.
• Customer and commercial data such as names, phone numbers, email addresses, conversation history, CRM fields, companies, tasks and follow-ups, catalog items, deals, pipelines, and quotes.
• WhatsApp and Meta data such as WhatsApp Business Account identifiers, phone number identifiers, message templates, message content, timestamps, delivery/read/reply status, webhook events, and media metadata or attachments where needed for the service.
• Email data such as connected provider and mailbox details, sender and recipient addresses, subjects, message content, threads, timestamps, delivery and campaign events, and attachments where needed for the service.
• Campaign and preference data such as audiences, schedules, delivery and engagement events, consent records, unsubscribe or suppression state, and template snapshots.
• Usage, device, and log data such as IP address, browser information, app events, security logs, error logs, and operational telemetry.

Why we use data

• Provide shared and personal inboxes, contacts, companies, assignments, follow-ups, campaigns, pipelines, catalog, quotes, automations, templates, dashboards, reporting, and AI-assisted workflows.
• Send client-approved messages through connected WhatsApp Business accounts and email providers.
• Sync and display messages, attachments, templates, and available delivery, read, reply, unsubscribe, suppression, and campaign tracking status.
• Operate, secure, debug, monitor, and improve WRKZY.
• Respond to support, billing, business, privacy, and data deletion requests.
• Prevent misuse, spam, fraud, security incidents, and policy-violating activity.
• Comply with applicable legal, tax, regulatory, contractual, and platform obligations.

AI-assisted processing

When a workspace enables AI Copilot, WRKZY may send bounded inbox and CRM context to OpenAI to provide summaries, drafts, rewrites, recommendations, and CRM suggestions. Workspace settings control availability and context access. WRKZY does not market autonomous agents as a current service, and the current assistant does not send messages or change CRM fields without a user or configured workflow. Provider prompts and raw AI responses are not stored by WRKZY; metadata-only usage events and explicitly reviewed CRM memory may be retained for audit, troubleshooting, and the requested workflow.

How we share data

We share data only as needed to operate WRKZY, comply with law, or follow a client's instructions. This may include hosting and database providers, infrastructure providers, email and support providers, AI processing providers when enabled, analytics or security tools, professional advisers, Meta or WhatsApp APIs, and connected email providers when a client enables those services. WRKZY does not sell Meta Platform Data, WhatsApp customer data, or client workspace data.

International processing

WRKZY is operated from India and may use service providers that process data in India or other countries. Where required, we use contractual, technical, and organizational measures intended to protect data when it is processed outside its country of origin.

Retention

Workspace, conversation, attachment, campaign, contact, and CRM data is generally retained while the client's workspace remains active. We delete or anonymize eligible workspace and customer data after a verified deletion request, unless retention is required for security, fraud prevention, legal compliance, dispute resolution, backup integrity, or legitimate business records.

Deletion and data rights

Workspace admins may request deletion of workspace or customer data through our Data Deletion page. Depending on your location and relationship to the data, you may have rights to access, correct, update, export, object to, restrict, or erase certain personal data. We will acknowledge eligible data requests within 7 business days and aim to complete eligible deletion requests within 30 days after verification.

For customer conversation data controlled by a WRKZY client, we may need to direct the request to that client or verify the request with the workspace admin before acting.

Security

We use technical and organizational safeguards designed to protect workspace and customer data. These include access controls, role-based workspace permissions, encrypted credentials or tokens where applicable, webhook verification, activity logging, and operational monitoring. No service can guarantee absolute security.

Children

WRKZY is intended for business use and is not directed to children. Clients should not use WRKZY to knowingly collect children's data unless they have all required authority and comply with applicable laws.

Changes to this policy

We may update this Privacy Policy as WRKZY, legal requirements, or platform requirements change. The updated version will be posted on this page with a revised date.

Related pages