Privacy Policy — WorkFixd

1. Who we are

WorkFixd (“we”, “us”, “our”) is an AI-powered business operations platform for small and medium-sized businesses. We are operated by WorkFixd and can be reached at [email protected].

2. What data we collect

Account information

When you sign up, we collect your name, email address, and business details you provide (business name, location, trade, services). This is used to personalize the workflows and reports we generate for you.

Google Business Profile data

If you connect your Google Business Profile, we access your business name, location, and customer reviews via the Google Business Profile API. We use this data solely to generate AI-drafted review responses on your behalf. We do not access your Gmail, personal Google account data, calendar, photos, or any other Google services.

Usage data

We collect standard server logs including IP addresses and request timestamps for security and rate limiting. We do not use third-party analytics trackers.

3. How we use your data

—To generate automated business reports, content, and recommendations tailored to your business
—To draft review responses based on your Google Business Profile reviews
—To deliver reports and alerts to your email address
—To improve the quality and relevance of our AI outputs over time
—To send transactional emails (new reports, account notifications)
—To protect the platform from abuse via rate limiting and fraud detection

4. How we store and protect your data

Your data is stored in a secure, encrypted database hosted on Neon (PostgreSQL). Google OAuth tokens are stored encrypted and used only to fetch your business reviews. We do not sell, rent, or share your personal data with third parties, except as described in this policy.

We use the following subprocessors to operate the platform:

AnthropicAI model for generating reports and review responses
ResendTransactional email delivery
NeonDatabase hosting
VercelApplication hosting
ClerkAuthentication
StripePayment processing

5. Google API data use

WorkFixd’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: data obtained from the Google Business Profile API is used only to generate review responses for the account holder. It is not used for advertising, sold to third parties, or transferred to any other service.

6. Data retention

We retain your account data for as long as your account is active. If you cancel your account, we delete your personal data within 30 days. Google OAuth tokens are deleted immediately upon disconnection from the Google integration.

7. Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing [email protected]. You can disconnect your Google Business Profile at any time from your account dashboard.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email. Continued use of WorkFixd after a policy change constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Email us at [email protected].