What this covers
This notice describes the privacy foundations built into Workfolio. Before a live commercial launch, the operating company must add its registered identity, contact details, lawful bases, processors and retention periods.
Account information
We store the account and business details needed to provide portfolio management, authentication, subscriptions and customer support. Passwords are stored as one-way hashes and session identifiers are stored securely.
Customer enquiries
Enquiries are shared with the portfolio business being contacted. They include the form details, consent time and the project, image or collection that prompted the message. Marketing consent is recorded separately and is optional.
Website assistant
When a business enables its website assistant, Workfolio stores the chat transcript and sends the question plus relevant approved business knowledge to the configured text-generation provider. Visitor session keys and rate-limit identifiers are stored as hashes. If a visitor asks for follow-up, their contact details and transcript are shared with that business as an enquiry. Marketing consent remains separate and optional.
Portfolio analytics
Workfolio records limited first-party views, searches, filter use and enquiries. IP addresses are pseudonymised with a secret salt and are not stored in raw form. No third-party advertising tracker is included.
Your choices
Account owners can export their data and close their account from settings. Enquiry submitters should contact the portfolio business to request access, correction or deletion of their enquiry information.