What we know about you, and about your clients.

Your name, your email address, and the details you choose to publish on your page. Your subscription and billing records. Which calendar and payment accounts you connected. Sign-in events, so we can tell whether an account is being used by someone who should not have it.

We do not ask for your date of birth, your address, or anything else we have no use for.

Whatever the booking collects: their name, their email, the answers to the questions you chose to ask, what they booked, what they agreed to, and what they paid. Any files exchanged, and any memos you write about them.

For this information you are the controller and we are the processor. It is your data about your clients, held on your instructions, and we do nothing with it except run the service and keep it safe. We do not read your notes in the course of supporting you.

Card numbers never reach us. They go from your client’s browser to Stripe.

To run the service you are paying for: showing your page, taking bookings, sending your emails, collecting your money, and keeping records you and your clients can both rely on.

To support you when you write to us, and to keep the service secure and working. To meet legal obligations, principally around invoices and tax records. That is the complete list. We have no marketing use for it and no analytics ambition beyond knowing whether the product works.

Nine companies, each doing one job, each contractually bound to protect the data and forbidden from using it for their own purposes.

One more, only if you choose it. If you use “Write to them” to email your client list, it goes out in your own name from your own domain, in one of two ways. If we set up notes.yourdomain for you, the notes go through Resend, on an account we keep only for professionals’ notes, and we keep who said yes and who left. If you connect a sending account of your own instead, your clients’ addresses reach that provider because you asked us to send through it, and the unsubscribe lives there.

And one more, once, if you ask for it. When you bring your practice over from Calendly, we read your Calendly account a single time: your event types, and the names and email addresses of the people who booked you in the last year. We give the access back straight away and keep nothing that would let us read it again. Those people become clients on your list, and none of them is sent notes unless they say yes.

If this list changes, this page changes.

WorkWith’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Raw and derived data from those APIs is never used to create, train or improve any machine learning or artificial intelligence model, ours or anybody else’s.

What we read from a connected Google Calendar is when you are busy, so your page does not offer an hour you are not free. What we write is the sessions your clients book. That is all we read or write. It stays between your calendar and your page, and none of it is sold, shared or given to a model. A connected Outlook or Microsoft 365 calendar is held to exactly the same.

One model runs here, and it never sees your calendar. When you write to us through the support form, your message goes to Claude, which drafts a reply for a person here to edit and send. It is handed your message, the topic you picked and the reply time the page promised you, and nothing else: not your clients, not your notes, not your money, not your calendar. Your message is not used to train it, and no reply reaches you without a person having read it.

One cookie, to keep you signed in. That is the only one, and it is why there is no consent banner: there is nothing here that needs your permission.

The support form has to stop machines filling it in, and the usual tool for that sets Google cookies on everyone who visits. We use Cloudflare Turnstile instead, which does the same job without a cookie.

We count visits to our own marketing pages in aggregate, with no cookie and no cross-site identifier. Your clients are not measured at all when they visit your page. The cookies page says all of this in one place.

Your account data for as long as you have an account, then 90 days after you cancel so you can change your mind or ask for a copy.

A client you delete is gone at once, and out of the backups within 30 days. Invoices and payment records are kept for seven years because tax law requires it. Support conversations for two years. Sign-in logs for 12 months.

You can see everything we hold, correct it, get a copy of it, or have it deleted. All of that is a button in the app: your details edit where they are shown, “Download everything” on Me gives you the lot as spreadsheets, and closing your account removes it. Anything we have missed, we will do within 30 days of you asking.

If you are in the UK or EU, GDPR applies and you can complain to your data protection authority. If you are in California, the CCPA applies. We have never sold personal information, so there is nothing for you to opt out of.

If one of your clients asks us directly for their data, we point them to you, because it is your record. We will help you answer them.

If data is exposed in a way that puts you or your clients at risk, we will email you within 72 hours of knowing: what happened, what was affected, and what we are doing.

Our security practices, including what we have and what we do not yet have, are on the Security page.