Worklytics Privacy Policy

Last Updated: July 10, 2023

Worklytics, Co (“Worklytics”, “us”, “we”, or “our”) operates the http://www.worklytics.co website (the “Marketing Site”) and the Worklytics application (the “Application”, and along with the Marketing Site, each a “Service”).

“You” are an individual using the Marketing Site or Application as an authorized representative of your organization, or whose Personal Information is processed by the Application at the instruction of an organization. The “Customer” is the organization purchasing and using the Application. This Privacy Policy, along with our Terms and Conditions, and any applicable service-level agreement with the Customer, govern the Customer’s relationship with Worklytics.

This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of Personal Information (defined below) and other data when you use our Services.

We will process and/or share your Personal Information as described in this Privacy Policy; however, the Application interacts with various other applications, each of which have their own privacy policies. We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

By using a Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Personal Information Collection

We collect and process information that relates to identified or identifiable individuals (“Personal Information”) as set forth below (note, specific Personal Information elements listed in each category are only examples and may change).

2. Information You Provide on the Marketing Site

A. Contact Information: First name, last name, phone number, email

B. Job Information: Information you include if you apply for a position at Worklytics, like email, resume, personal and contact information, social profiles, and any additional information you submit.

3. Information We Collect Automatically in the Services

A. Log and Device Information

We collect information about the device you use to access our Services, e.g., device type, its software version, or carrier.

We also collect information that your browser sends whenever you visit our Marketing Site. This Log Information may include information such as your computer’s IP address, browser type, browser version, the pages of our Marketing Site that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

B. Cookies

We use Cookies stored in your or your users’ browser to identify users of the Services and authorize their access to the appropriate Customer accounts.

We may also use third-party services such as Google Analytics that collect, monitor, and analyze this type of information to increase our Marketing Site’s functionality. These third-party service providers have their own privacy policies addressing how they use such information. For more information, see our “Cookies” section below.

4. Information We Process in the Application

We process Personal Information in the Application pursuant to individual agreements with Customers, the specific terms of which prevail over, and may vary from, this Privacy Policy. We do not collect the Personal Information described in this section on our Marketing Site and will only process this Personal Information at the direction of a Customer that has the prior legal right to obtain such information about its employees.

A. Login Information

You or your organization (our Customer) may authorize third-party identity providers, such as Google, GitHub, or Microsoft Entra, to disclose your information to the Application as a login method to authenticate yourself.

B. Work Information

The Application processes information about work you perform on behalf of a Customer in certain worklplace tools. We obtain this information via APIs or provided directly by the Customer. This information can include metadata, calendar information, metadata about work performed in those tools (e.g., size of document revision made), employee records, or other work-related information attributable to you.

C. User Content

The Application will process Personal Information you choose to provide, post, upload, link, store, share, or otherwise make available in the Application, including certain text, graphics, videos, or other material and its associated metadata. If you do not use our proxy service, some of the data we process in the Application may contain PII of the Customer’s employees or users. We never generate behavioral inferences on Application users through the data we collect or process.

D. Survey Information

A Customer may use the Application to survey its employees to collect feedback on employee satisfaction, engagement, onboarding, exits and 360-degree performance, or other work matters. These surveys might ask for Personal Information and your responses may be attributable to you.

E. Communications in or about the Application

When a Customer contacts us for support, maintenance, setup, or other business purposes, our interactions with you or the Customer may contain Personal Information. 

5. How We Use Your Personal Information

Subject to your Rights and Choices below, we generally use your Personal Information in the following ways:

A. To provide, maintain, and improve our Marketing Site, including analytics, marketing, support, and job applications

1. Contact Information: We use your Contact Information to contact you about our Services, provide demonstrations of the Application, provide support you request, and to help in our direct marketing efforts. Specifically, if you provide your email address for marketing purposes, we may use it to contact you with newsletters, marketing, or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.
2. Login Information: We use your Login Information to enable you to securely access the Application and to identify your activities in the Application.
3. Job Information: If you apply to work at Worklytics, we use your Job Information to evaluate your application and contact you about it.
4. Log and Device Information: We use Log and Device Information to help improve our Application and Services, internal operations, and systems. We also use Device Information to understand a user’s engagement in an activity or feature, for example which pages or tools you interacted with or data about any crashes during use.
5. Advertising: We, and certain third parties operating on or through our Marketing Site, may engage in online behavioral advertising. This form of advertising includes various parties and service providers, including third-party data controllers, engaged in the processing of cookies and other online identifiers, in connection with advertising. We may place cookies on your device, then provide it directly to a third party for targeted advertising on a third-party platform. The parties that control the processing of Personal Information for behavioral advertising purposes may build a profile of you containing this information, and may be able to identify you across sites, devices, and over time. See the “Rights and Choices” and “Cookies” sections below for information about how you can limit or opt out of this processing.

B. To provide, maintain, and improve our Application and Services

1. Workplace Information: We analyze work information  in the Application at the direction of our Customers. In doing so, we process  Work Information  from workplace tools, for example Google Workspace, Microsoft 365, GitHub, Jira, GitLab, Bitbucket, and others. We analyze that Work Information on both an individual and company level, using it to improve Customer decision-making and employee experience, among other things. We do not intentionally process information about user gender, race, or other categories of sensitive information. To the extent we unintentionally receive such sensitive information, we do not store or process it. However, if a Customer elects to use a proxy to run our Application, the Customer may choose to provide us with Personal Information, including Work Information, or not. Proxies may run in a Customer’s system and not send any employee Personal Information to Worklytics. A Customer may choose to anonymize data in the proxy that would otherwise be considered Personal Information, then share that data with Worklytics. We may process some Personal Information of Customer Employees if the Customer chooses pseudonymization methods that leave some Personal Information intact when sharing with us for support or other business purposes. We reserve the right at all times to process, commercialize, and otherwise use anonymized data without restriction. For more information on how we enable pseudonymization and anonymization via proxy, see here.
2. User Content: Pursuant to Customer instructions, we analyze User Content to provide information to the Customer about employee activity. We do not moderate User Content, and in general only process the metadata associated with User Content. However, the Customer may sometimes view User Content.
3. Survey Information: At the direction of Customers, we process Survey Information, such as surveys on performance and employee engagement, and provide it to the Customer for its internal use. The Customer chooses the content of any survey.
4. Log and Device Information: We use Log and Device Information to secure and  improve our Application and Services, internal operations, and systems. We also use Device Information to understand a user’s engagement in an activity or feature, for example which pages or tools you interacted with or data about any crashes during use.

C. To create anonymized data about use of our Services

We use Personal Information to create anonymized analytics data about the use of our Services; we may use this data for any legally-permissible purpose, including without limitation benchmarking and other research & development purposes. We may retain this data after you or the Customer no longer uses or has an account in the Services.

D. To comply with legal obligations or pursuant to a transaction

If Worklytics is involved in a merger, acquisition, or asset sale, your Personal Information may be transferred. We will provide notice before your Personal Information is transferred and becomes subject to a different privacy policy.

Under certain circumstances, Worklytics may be required to disclose your Personal Information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

Finally, we may disclose your Personal Information in the good faith belief that such action is necessary to:

1. comply with a legal obligation;
2. protect and defend the rights or property of Worklytics;
3. prevent or investigate possible wrongdoing in connection with the Service;
4. protect the personal safety of users of the Service or the public; or
5. protect against legal liability.

6. Information Sharing

We may share Personal Information we collect with a variety of parties, depending upon the purpose for and context in which you provided that information. We generally share Personal Information with the following types of recipients:

A. Customers

We share Personal Information provided in the Application with Customers for the improvement of their business. In general, we do not share work product generated on productivity tools with the Customer and we do not share Personal Information from one Customer with other Customers. We reserve the right, however, to share, sell, or otherwise commercialize aggregate, anonymized data gathered from the Application with Customers and third parties without restriction (such as statistical benchmarks and the like).

B.Third-Party Service Providers

The below third parties have access to your Personal Information only to perform specific tasks on our behalf and are obligated not to disclose or use your information for any other purpose.

7. Your Rights and Choices

Subject to the rights granted to other individuals, and our rights to limit or deny access/disclosure under applicable law, you have the following rights in your Personal Information. We may require that you provide additional Personal Information to exercise these rights, e.g., information necessary to prove your identity. For data collected or processed by the Marketing Site, you may contact us directly regarding these rights. For data collected or processed by the Application at the instruction of a Customer, you must contact the Customer.  We will assist you or the Customer as appropriate in the fulfillment of your request.

A. Access

You may receive a list of your Personal Information that we process to the extent required and permitted by law.

B. Rectification

You may correct any Personal Information that we hold about you to the extent required and permitted by law. You may be able to make changes to much of the information you provided directly to the Application or Service via your account settings menu.

C. Erasure

You may request erasure of any Personal Information that we hold to the extent required and permitted by law.

Customers may request cancellation of their account and deletion of associated data by contacting privacy@worklytics.co. Deleting your account will cause all the information in the account to be permanently deleted from our systems within a reasonable time, as permitted by law, and will disable your access to any other services that require a Worklytics account.

We will respond to any such request, and any appropriate request to access, correct, update, or delete your Personal Information within the time period specified by law (if applicable) or without excessive delay. We will promptly fulfill requests to delete Personal Information unless the request is not technically feasible or such data is required to be retained by law (in which case we will block access to such data, if required by law).

D. Data Export

To the extent required by applicable law, we may allow you to download data from your Worklytics account or export it to external services. Please recognize that any data you transfer from Worklytics in this manner will no longer be under Worklytics’ control and thus will not be governed by this policy.

E. Objection

Where we process Personal Information in accordance with our legitimate interests, you can object to that processing to the extent allowed by law.

F. Regulator Contact

You have the right to contact or file a complaint with regulators or supervisory authorities about our processing of Personal Information. To do so, please contact your local data protection or consumer protection authority.

G. California Rights

Residents of California (and others to the extent required by applicable law) may request a list of Personal Information we have disclosed about them to third parties for direct marketing purposes during the preceding calendar year. This request must be written, signed, and mailed to us at the address below.

H. Your Choices

You may use some of our Services without providing any Personal Information, but you may not be able to access certain features or view certain content, such as demos. You have the following choices regarding the Personal Information we process:

1. Consent: If you consent to processing, such as by providing your email address for marketing, you may withdraw your consent at any time, to the extent required by law
2. Direct Marketing: Worklytics never directly markets to Customers’ employees or users via email, telephone, SMS, or otherwise.  If you have separately signed up for marketing, you may opt out of or withdraw your consent to direct marketing communications. You may cease direct marketing from us by clicking the unsubscribe link in any promotional email we send you. You may still receive communications related to your account on the Services, which communications cannot be disabled.
3. Do Not Track: We support Do Not Track. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

8. Cookies

Cookies are small files that may include an anonymous unique identifier. Cookies are sent to your browser from a web site and transferred to your device. We use cookies on our Services to collect information to improve our services for you.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help feature on most browsers provides information on how to accept cookies, disable cookies, or notify you when receiving a new cookie.

If you do not accept cookies, you may not be able to use some features of our Services. Please note that turning off cookies does not necessarily opt you out of being delivered advertising. You may continue to receive generic ads. You must opt out of third-party services directly via the third party. You may view a list of other third-party service providers who collect information, and/or opt out of such collection of information about you, by visiting https://www.networkadvertising.org/choices/ or https://www.aboutads.info/choices.

9. Security

The security of your Personal Information is important to us, and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the information we store, to protect it from unauthorized access, destruction, use, modification, or disclosure.

However, please be aware that no method of transmission over the internet, or method of electronic storage is 100% secure and we are unable to guarantee the absolute security of the Personal Information we have collected from you. For more information, please see our Security page.

10. International Transfer

While using the Services, your information, including Personal Information, may be transferred to, and maintained on servers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are an EU or UK Customer, you may elect to have us endeavor to process and store your Personal Information in the EU or UK.  If you are located outside the U.S. and do not elect to have your Personal Information processed and stored in your local jurisdiction, your Personal Information may be transferred to the U.S. The U.S. does not provide the same legal protections guaranteed to Personal Information as the European Union does. 

Accordingly, your Personal Information may be transferred to the U.S. pursuant to our legitimate interest in performing services you request, our contractual obligations with EU or UK Customers (including Standard Contractual Clauses), and/or your consent, as applicable. We accomplish these transfers through AWS, Google Cloud, or Microsoft Azure, and pursuant to Model Clauses (as approved by the Article 29 Working Party) agreed upon between those service providers and Worklytics. Please see the Amazon Web Services Privacy Shield FAQ, Additional Terms for Google Cloud, and the Microsoft Azure Online Terms (July 1, 2019, Attachment 3) for more information on how your data may be transferred from overseas.

In the event of a conflict between this Privacy Policy and the Standard Contractual Clauses or Model Clauses approved by an EU data protection authority, the latter will govern.

11. Children’s Privacy

Only persons aged 18 or older have permission to access our Service. Our Service does not address or target anyone under the age of 16 (each a “Child”). We do not knowingly collect personally identifiable information from Children. If you are a parent or guardian and you learn that your Child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a Child without parental consent, we take steps to remove that information from our servers.

12. Retention

Subject to your rights and choices in this Privacy Policy and any separate agreement between us and the Customer, in general we will retain your Personal Information for the duration of your contractual relationship with us plus one year.

13. Changes to This Privacy Policy; Contact Us

This Privacy Policy is subject to occasional revision. If we make any changes to this Privacy Policy, we will change the “Last Updated” date above. If you have any questions about this Privacy Policy, please contact us at privacy@worklytics.co or at:

Worklytics, Co
Attn: Privacy
PO Box 50464

Bellevue, WA 98015-0464

If you are in the EU, you may contact our DPO:

George Knap - dpo@worklytics.co

Clonminch Hi-Technology Park

Clonminch, Tullamore, OFFALY, IRELAND R35 A2Y4

‍

‍

‍