Staging · test data
Workari
Log in Start free trial
Legal

Privacy Policy

Effective October 23, 2026

1. About this policy

This Privacy Policy explains what personal information Elder Goose, LLC ("Workari," "we," "us," or "our") collects through Workari™ and the workari.io website, how we use it, who we share it with, how long we keep it, and the choices you have.

Workari is used by businesses, which we call Organizations. An Organization's jobs, locations, photos, documents, and contacts are its Customer Data. For that data, we act as the Organization's service provider: we handle it on the Organization's behalf, following its instructions. If your information is in an Organization's Customer Data and you have a question about it, ask that Organization first. We'll help it respond.

For account, billing, and security information, such as your login and sign-in records, we decide how it's used, and this policy describes that.

2. Information we collect

A. Information you give us
  • Account details: your first and last name, email address, password (stored only in hashed form), and, if you add one, your phone number.
  • Organization details: the Organization's name, time zone, and optional contact email and phone number.
  • Agreement record: when you agreed to the Terms of Service, and which versions of the Terms and this policy were in effect then.
  • Settings: your notification preferences, your choice of light or dark appearance, which sections your Home page shows in each Organization, and your role and permissions in each Organization.
  • Messages to us: what you send when you email support, and what you send through the Feedback form, which emails us your message with your name, email address, Organization and the page you were on.
B. Information Organizations put into Workari (Customer Data)
  • Jobs: titles, descriptions, comments, schedules, assignments, notes about completion or delays, and a history of every change, with who made it.
  • Photos: photos attached to jobs. We resize each one and save it as a new image. This removes the information cameras embed in photos, including the GPS location where it was taken, and we don't keep the original. We also keep the photo's original file name.
  • Documents: PDF, Word, Excel, text, and CSV files attached to jobs, with their original file names. We store each one as it was uploaded. We only check its file type; we don't read its contents.
  • Locations: addresses, unit numbers, map coordinates, the place ID Google uses for the address, and notes.
  • Information about people who don't have an account. Organizations may enter:
    • onsite contacts for a location: name, phone number, and email;
    • the name and email of people they invite, and, for a client, the company they represent;
    • bulletins for their team.
  • Requests from the public request form. The form collects the Requester's name, email address, where the work is needed, and a description of the work, and, if the Requester gives them, the time of day that suits them and the earliest date. We email the Requester a link to confirm the request. Once confirmed, it goes to the Organization, which keeps it as a job.
C. Payment information

When an Organization subscribes, its Owner pays through Stripe. Stripe collects and stores the card details; we never receive or store full card numbers. We keep Stripe's IDs for the customer and subscription, the plan and its price, discounts, the number of people billed, and renewal dates.

D. Information collected automatically
  • Sign-in records: when you sign in, or someone tries to, we record the time, the email used, the IP address, and the browser's user-agent string. We use these to protect accounts, for example to block repeated failed attempts.
  • Activity log: we record important actions, such as invitations, role changes, location changes, photo and document uploads, and changes people make to their own name and phone number, with who did them and the before and after values. An Organization's managers see its activity log; its Owner also sees its members' sign-in records.
  • Error reports: if Workari hits an error, the server sends us a technical report about the request that failed, which can include information from it.
  • No analytics or advertising tracking: we don't use analytics services, advertising networks, or tracking pixels, and we don't track you across other websites. Google and Ionic receive browser information when they serve content to Workari's pages, as described below; we don't let any other party track you across sites through Workari.
E. Cookies and browser storage
  • Cookies: we use only the cookies Workari needs to work. A session cookie keeps you signed in for up to 30 days. A security cookie protects forms against forgery. A short-lived cookie can carry a message from one page to the next.
  • Browser storage: Workari saves some display choices in your browser, such as which table columns you show and your calendar settings. They stay on your device.
  • Content from other companies: pages load fonts from Google Fonts and icons from Ionic's content network. Address search and maps load Google Maps. Like any website, these services receive your IP address and browser details when your browser fetches their content. Google Maps also receives the addresses you type into address search.

3. How we use information

  • To provide Workari: show each person the jobs, locations, and people their role allows; resize photos; and run billing.
  • To send email:
    • job notifications to Users, according to their settings;
    • updates to Requesters about the requests they sent;
    • invitations;
    • account, security, and billing messages;
    • notices about changes to our Terms or this policy.
  • To keep Workari and its users secure: detect and block attacks and abuse, and investigate problems.
  • To give support when you ask for it, and to fix errors.
  • To run our business: Workari staff see who signs up, which Organizations they join, and how much each Organization uses Workari (counts of members and jobs, and when it was last active). This summary is shown only to a small number of our staff.
  • To meet legal obligations and enforce our Terms.

We don't sell personal information. We don't share it for advertising. We don't use Customer Data to train AI models.

4. Email choices

  • Users: each User chooses which job notifications they get by email, for each Organization, in their notification settings.
  • Requesters: get email about their own request as it progresses. They can ask the Organization, or us, to stop it.
  • Emails you can't turn off: security, account, and legal emails, and billing emails to an Organization's Owner. Other managers can turn billing emails off.
  • No marketing email: we don't send it.

5. Who can see your information

  • Other people in your Organization.
    • Members see each other's names and roles, the company each client represents, and the jobs their roles allow. Clients see only the jobs at their own locations, and not the photos or documents the Organization marks for its own people only; beside the Organization's people they see only the Organization's name, and nothing about other clients.
    • Managers, and team members a manager allows to view the team or clients, see those people's email addresses.
    • People who can open a job see the names and email addresses of the clients with access to it.
    • Managers see clients' phone numbers and the activity log, including changes members make to their own name and phone number.
    • Clients see the Organization's phone number, so they can call about a problem that can't wait. If the Organization has no phone number, they see the Owner's phone number from the Owner's account instead. A manager can hide it; then clients see no number.
    • The Owner also sees members' sign-in records, including IP address and browser.
  • Anyone with an Organization's request link. Its public request form shows the Organization's name and, if a manager set one, its contact email, so people can ask the Organization for an invite. Once someone confirms a request, the confirmation page and email also show where replies go: that contact email, or the Owner's email address if none is set. Unless a manager hides it, the form and the request-received email also show the Organization's phone number, or the Owner's phone number if the Organization has none.
  • Our service providers. These companies process information for us, under agreements that limit its use to providing their service:
    • DigitalOcean: hosting, database, and storage of photos and documents, in the United States.
    • Resend: sends Workari's email.
    • Stripe: payments. Stripe receives the Owner's email address, the Organization's name and web address, and our internal ID for it. Stripe collects card and billing details directly.
    • Google: Maps, address search, and web fonts, loaded in your browser as described above. Our servers also send Google the place ID of each location picked from address search (Google's own reference for the address, nothing about you) about once a month, to keep its map coordinates current: Google lets us keep those coordinates for only 30 days. Google's handling is described in the Google Privacy Policy.
    • Ionic: serves icon styles to your browser.
    • GitHub: holds our code. Each error report described above also becomes an issue in our private repository there, after email addresses, phone numbers, passwords, and other secrets are removed. An issue can still include the address of the page that failed, which names the Organization, and our internal ID for the signed-in user.
    • Migadu: hosts our support and alert mailboxes, in Switzerland. Messages you send to support, and the error reports described above, are stored there.
  • Workari staff. A small number of our staff can access Workari's data. They do so only to give support you ask for, keep the Service secure and working, see sign-ups and how much each Organization uses Workari, or meet a legal obligation.
  • For legal reasons. We may disclose information if the law, a court order, or a valid legal request requires it, or to protect the rights, safety, or property of our users, the public, or Workari.
  • In a business transfer. If Workari is reorganized, merged, or acquired, your information may be transferred to the company that provides Workari after that. That includes a move to a different company. We'll email you when this happens.

6. How long we keep information

  • Customer Data is kept while the Organization exists, including after its subscription or free time ends, until its Owner deletes the Organization.
  • A deleted Organization can be recovered for 30 days. Then its data is permanently deleted, including its jobs, photos, documents, locations, and activity log. We keep a minimal record of the deletion indefinitely, as proof of what was deleted and when:
    • the Organization's name and web address;
    • when it was deleted;
    • who deleted it and who owned it;
    • its Stripe customer ID;
    • its former members and their roles;
    • counts of what was deleted.
  • Accounts are kept until you delete yours. You can restore a deleted account for 30 days. After that, we erase your email address, phone number, password, sign-in records, and notifications, and remove your email address and phone number from the activity log. Your name stays on the work records of the Organizations you worked for, because those records belong to them. Ask the Organization if you want your name removed from them.
  • Sign-in records are deleted after 90 days.
  • Other activity-log entries are deleted after two years.
  • Notifications (the bell) are deleted after 90 days, or 30 days after you clear one.
  • Public request form submissions are deleted 7 days after their 48-hour confirmation link expires, whether confirmed or not. A confirmed request lives on as the Organization's job.
  • Backups: our database provider keeps backups for a limited time, so deleted data can remain in backups until they expire.

7. Security

We protect information with:

  • encrypted connections (HTTPS) to the site and to our database;
  • hashed passwords;
  • limits on sign-in attempts and other abuse;
  • private storage for photos and documents that opens only through short-lived links, after checking that the person has permission;
  • separation between Organizations, so each one sees only its own data.

No system is perfectly secure. If a breach affects personal information we control, such as account details, we'll notify you as the law requires. If it affects Customer Data, we'll notify the affected Organizations promptly and help them notify the people concerned.

8. Your choices and rights

  • Update your information: change your name, phone, email address, password, and notification settings on your Account page.
  • Delete your account: from your Account page. An Owner can delete an Organization from its Settings page.
  • Ask us: to see, correct, delete, or get a copy of personal information we hold about you, email [email protected]. We'll confirm it's you, and we'll respond within 45 days. If the information is part of an Organization's Customer Data, we'll pass your request to that Organization or help it respond.
  • We won't treat you differently for making a request.
  • California residents: we don't sell or share personal information, as California law defines those terms.
  • Do Not Track: we don't track people across other websites, so a browser's Do Not Track setting doesn't change how Workari works.

9. Children

Workari is for businesses, and users must be at least 18. We don't knowingly collect information from children. If we learn that we have, we'll delete it.

10. Where information is stored

Workari is offered to businesses in the United States. We store data in the United States. Our support and alert mailboxes are hosted in Switzerland.

11. Changes to this policy

When we make a material change to this policy, we'll email every account at least 30 days before the change takes effect, and post the new version with the date it takes effect. A change required by law, or a change of the company that provides Workari, may take effect sooner; we'll still email you about it.

12. Contact

Questions or requests about privacy? Email [email protected].