Privacy Policy

Last updated: 15 June 2026

Plain-English summary

We collect what you give us (intake answers, email, payment info via Stripe). We use it to deliver your audit report and to email you about it. We don’t sell your data. We don’t use it to train AI models. We don’t share it except with the service providers we need to actually run the business (Stripe, Tally, our AI API provider, our email tool).

What we collect

From the AI Readiness Score quiz: your answers, your email (if you enter one), and basic technical info from your browser (IP address, browser type) for security and analytics.
From the paid intake form: the business information you provide so we can build your report.
From Stripe checkout: your name, billing email, and payment confirmation. We do not see or store full card details — Stripe handles that directly.
From email: any message you send us and our reply.

How we use it

To build and deliver your tailored audit report.
To process your payment.
To email you about your purchase, your report, and the 90-day check-in (Tier 2).
To improve the service in aggregate (no individual data is used to train AI models).

Who we share it with

We use a small set of service providers to actually run the business. Each one only sees the data it needs:

Stripe — payment processing. Stripe privacy policy.
Tally — intake forms and the AI Readiness Score quiz. Tally privacy policy.
Cloudflare — hosting and basic analytics for this website.
OpenAI / Anthropic-class AI APIs — used to help generate parts of your report. Your data is sent under their API terms with training opt-out: it is not used to train models.
Google (Gmail/Drive) — for email delivery and report sharing.

We don’t sell your data, share it for advertising, or hand it to third parties beyond the providers above.

How long we keep it

Intake answers + delivered reports: kept for up to 24 months in case you come back for an upgrade or check-in, then deleted unless you ask us to keep them longer.
Payment records: kept as required by tax/accounting law (typically 7 years).
Email correspondence: kept until you ask us to delete it.

Your rights

You can email us any time to:

Get a copy of the data we hold about you.
Correct anything that’s wrong.
Delete your data (subject to records we’re legally required to keep, e.g. payment records).
Object to processing or withdraw consent.

If you’re in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, or CCPA. We’ll honor them.

Cookies and analytics

This site uses minimal cookies (only what Cloudflare and embedded forms need to function). We don’t use third-party advertising or tracking cookies. We may add lightweight, privacy-respecting analytics later; if we do, this page will be updated.

Children

WorkAudit is for adult business owners. We don’t knowingly collect data from anyone under 18.

Changes to this policy

If we change anything material, we’ll update the date at the top and, if it affects existing customers, email you.

Contact

Privacy questions, data requests, or anything else: [email protected]