This Privacy Policy explains how WorcX ApS ("WorcX", "we") processes personal data when you use the WorcX app and services. We are the data controller for the personal data described here. For details about your rights under the GDPR, see our GDPR page.
1. Data we collect
Account & company data
- Name, email address and phone number;
- Company details you provide (name, CVR, address, role);
- Login credentials (passwords are stored only as secure hashes).
Content you add
- Cases and inspections, offers, materials, notes and uploaded media;
- Customer records you create for your business.
Billing data
- Subscription and plan information, and invoices. Card payments are handled by Stripe — we do not store full card numbers.
Technical data
- Device and app information, log data and basic usage needed to run and secure the Service.
2. How we use your data
- To create and manage your account and company workspace;
- To provide the Service's features (cases, offers, etc.);
- To process subscriptions, payments and invoices;
- To secure the Service and prevent fraud or abuse;
- To provide support and respond to your requests;
- To comply with legal and accounting obligations.
3. Legal basis
We process personal data to perform our contract with you (providing the Service), to comply with legal obligations (such as bookkeeping), and on the basis of our legitimate interests in operating and securing the Service. Where required, we rely on your consent.
4. Sharing your data
We do not sell your personal data. We share it only with service providers who process it on our behalf under appropriate agreements, including:
- Stripe — payment processing and subscription billing;
- Cloud hosting & storage providers — to host the application and store your data securely;
- Authorities or advisors where required by law or to protect our rights.
5. International transfers
Your data is primarily processed within the EU/EEA. Where a provider processes data outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Retention
We keep personal data for as long as your account is active and as needed to provide the Service. After account closure we delete or anonymise data, except where we must retain certain records (for example, invoices for statutory accounting periods).
7. Security
We use technical and organisational measures to protect your data, including encryption in transit, hashed passwords and access controls. No system is completely secure, but we work to keep your data safe.
8. Your rights
You have rights to access, correct, delete, restrict and port your personal data, and to object to certain processing. To exercise them, see GDPR and Delete Data, or contact us at privacy@worcx.dk.
9. Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect data from children.
10. Changes
We may update this policy from time to time. We will post the updated version here and change the "last updated" date above.
11. Contact
For privacy questions, contact WorcX ApS at privacy@worcx.dk — Vesterbrogade 1, 1620 Copenhagen, Denmark (CVR 12345678).