Data Processing Terms

2. When these terms apply

These terms apply when we process personal data on your behalf to provide GoWorkr to you: mainly the information you keep in GoWorkr about your customers and other people you deal with. For that information, you're the controller and we're your processor.

They don't cover information we use for our own purposes, such as your account details, your subscription information, and information we use to keep GoWorkr secure and working. We're the controller for that, and our Privacy Policy explains how we handle it.

3. Details of the processing

Subject matter and purpose

Providing GoWorkr to you, including storing and showing your business records, sending quotes, invoices and reminders you ask us to send, providing quote links and recording responses to them, creating records exports, and, if you choose to use them, the AI features and WhatsApp integration.

Nature of the processing

Collecting, storing, organising, displaying, updating, sending, exporting and deleting personal data, as needed to provide GoWorkr and carry out what you ask it to do.

Duration

For as long as you have a GoWorkr account, until the personal data is deleted as described in section 12.

Types of personal data

• names, email addresses, phone numbers and addresses
• notes you add
• details of jobs, quotes, invoices and payments, including quote responses and any decline reasons
• expense details and receipt images, which may include details of people you deal with
• personal data included in your AI assistant conversations or WhatsApp messages with GoWorkr

GoWorkr isn't designed for special category data, such as health information, or criminal offence data. Please don't add it.

Categories of data subjects

• your customers and potential customers, and their contacts
• people you send quotes or invoices to, including people who respond to a quote link
• other people whose details appear in your records, such as suppliers named on expenses or receipts

4. Your responsibilities

As the controller of this personal data, you're responsible for:

• having a lawful basis to use it, and to send quotes, invoices and other messages to the people you send them to
• telling people how you use their information, where the law requires you to
• the accuracy of the information you add
• deciding whether to use the AI features and WhatsApp integration with it
• making sure your instructions to us comply with UK data protection law
• meeting your other obligations as a controller

5. Our instructions from you

We'll only process this personal data on your documented instructions, unless UK law requires us to do otherwise (in which case we'll tell you first, unless the law prevents us). Your instructions are:

• our Terms of Service, including these Data Processing Terms
• how you use and set up GoWorkr, for example adding records, sending quotes and invoices, sharing quote links, exporting records, turning on AI features, linking WhatsApp and deleting information
• any other reasonable written instructions you give us that are consistent with these terms

If we think an instruction breaks UK data protection law, we'll tell you.

6. Confidentiality

We'll make sure anyone we authorise to process this personal data is under an obligation of confidentiality.

7. Security

We take appropriate technical and organisational measures to protect this personal data, taking into account the nature of GoWorkr and the risks involved. These include:

• requiring sign-in, and keeping each business's records separate so they can only be reached through that business's account
• using encrypted connections between the app and our servers
• limiting access to personal data to what's needed to run and support GoWorkr
• running GoWorkr on established infrastructure providers
• protecting public quote links against misuse

No online service can be completely secure. You're responsible for keeping your own sign-in details safe and for who you share quote links with.

8. Sub-processors

You give us general authorisation to use other providers ("sub-processors") to help us provide GoWorkr. Our current sub-processors for personal data we process on your behalf are:

• Supabase: database, sign-in and file storage, including receipt images.
• Render: hosting for GoWorkr's backend servers.
• Resend: sending quotes, invoices, reminders and quote response notifications by email.
• Anthropic: the AI models behind GoWorkr's AI features, only if you've given AI permission and use them.
• Meta (WhatsApp Business Platform): sending and receiving WhatsApp messages, only if you link WhatsApp.

Apple and RevenueCat handle subscriptions. They process information about your own subscription, not your customers' data, so they're covered by our Privacy Policy rather than these terms.

We'll make sure our sub-processors are bound by data protection obligations that give appropriate protection for the personal data, including through the terms our providers make available to their customers. We remain responsible to you for how our sub-processors process your personal data.

We'll keep this list up to date. If we plan to add or replace a sub-processor in a way that materially affects your personal data, we'll let you know by email or in the app before the change where reasonably possible. If you object on reasonable data protection grounds, tell us at hello@goworkr.co.uk. If we can't resolve your concern, you can stop using GoWorkr and delete your account.

9. International transfers

Some sub-processors may process personal data outside the UK. Where that happens, we'll only transfer it as permitted by UK data protection law, for example to a country the UK recognises as providing adequate protection, or using appropriate safeguards. Our Privacy Policy gives current information about where information is processed.

10. Helping you meet your obligations

• Data subject requests. GoWorkr lets you view, correct, export and delete your records yourself. Where that isn't enough, we'll help you respond to requests from people exercising their data protection rights, where reasonably possible. If we receive a request directly about your records, we'll pass it to you or tell the person to contact you.
• Security, DPIAs and regulators. Taking into account the nature of the processing and the information available to us, we'll give you reasonable help with your security obligations, any data protection impact assessment, and any related consultation with the Information Commissioner's Office.

11. Personal data breaches

If we become aware of a personal data breach affecting personal data we process on your behalf, we'll tell you without undue delay, using the email address on your account. We'll give you the information we reasonably can to help you meet your own obligations, and take reasonable steps to limit the breach.

12. Deletion and return of personal data

You can export your business records from the app at any time, including before you delete your account.

When you delete your account in the app, we delete the personal data we process on your behalf from our live systems, unless UK law requires us to keep it. Residual copies may remain in backups for a limited period until they're overwritten or expire through our normal backup processes. See Delete your account.

13. Information and audits

On reasonable written request, we'll give you the information reasonably necessary to show that we meet our obligations under these terms. If that information isn't enough, we'll cooperate with a reasonable audit by you or an independent auditor you appoint. Any audit must be on reasonable notice, at your cost, under appropriate confidentiality, and must not give access to other users' data or our providers' systems.

14. How these terms fit with our other terms

If these Data Processing Terms conflict with anything else in our Terms of Service about how we process personal data on your behalf, these Data Processing Terms take precedence. We may update them in the same way as our Terms of Service.

15. Contact us

Matthew Thomas Moras, trading as GoWorkr
Email: hello@goworkr.co.uk