Privacy Policy

Wirkflow ("we", "us", or "our") operates wirkflow.net. This Privacy Policy explains what information we collect, how we use it, who we share it with, and how we protect it. By using Wirkflow, you agree to this policy.

1. Information We Collect

We collect information you provide directly when you:

• Create an account — name, email address, and password (stored as a secure hash).
• Use the app — project names, client names, milestone details, work logs, meeting notes, and invoice data you enter.
• Subscribe — billing information is collected and processed by Stripe. We never store your full card number on our servers.
• Upload a logo — image files you upload for use in PDF invoices.

We also collect limited technical data automatically, including IP addresses, browser type, and pages visited, through standard server and cloud infrastructure logs.

2. How We Use Your Information

• Provide, operate, and improve the Wirkflow service.
• Process payments and manage your subscription.
• Generate PDF invoices and client share links on your behalf.
• Send transactional communications (e.g. subscription receipts).
• Detect and prevent fraud or abuse.

3. How We Share Your Information

We do not sell your personal data. We share information only with the following third-party service providers as necessary to operate Wirkflow:

• Google Firebase / Firestore — stores your account and project data. Data is encrypted at rest and in transit. Firebase Privacy Policy.
• Google Cloud Run / Cloud Storage — hosts the application and stores uploaded logos.
• Stripe — processes all subscription payments. Stripe is PCI-DSS compliant. Stripe Privacy Policy.

We may also disclose information if required by law or to protect the rights and safety of Wirkflow and its users.

4. Client Share Links

When you share a project link with a client, that link is publicly accessible to anyone with the URL. It displays only the project information you have chosen to share. We recommend sharing links only with intended recipients.

5. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data by contacting us. Subscription records may be retained as required by applicable law.

6. Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit.
• Passwords stored as bcrypt hashes — never in plain text.
• Firestore security rules restricting data access to authenticated owners.
• Payment data handled exclusively by Stripe; we never store card details.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You may cancel your subscription at any time through the billing portal.

8. Cookies

Wirkflow uses a single session cookie (__session) to keep you logged in. No third-party tracking or advertising cookies are used.

9. Contact

If you have questions about this Privacy Policy, please contact us at:
wirkflow.net — via the account settings page.