1. Introduction
WIP Platform ("we," "us," or "our") is committed to protecting the privacy of our users and the personnel data stored within our platform. This Privacy Policy describes how we collect, use, store, and share information when you use our workforce intelligence platform and related services.
2. Information We Collect
We collect the following categories of information:
Account Information
- Name, email address, and company name during registration
- Authentication credentials managed through Amazon Cognito
- Billing information processed through Stripe
Personnel Data
- Personnel records including names, contact details, and employment information as entered by Subscribers
- Credential and certification data including issuing bodies, expiry dates, and document images
- Assignment and deployment history
- Qualification and compliance records
Usage Information
- Log data such as IP address, browser type, pages visited, and timestamps
- Feature usage analytics to improve the Service
3. How We Use Your Information
- To provide, maintain, and improve the Service
- To process subscriptions and billing
- To send transactional communications such as credential expiry alerts and compliance notifications
- To provide customer support
- To detect, prevent, and address technical issues and security threats
- To comply with legal obligations
4. Data Storage and Security
Your data is stored on Amazon Web Services (AWS) infrastructure with the following security measures:
- Encryption in transit using TLS 1.2+
- Encryption at rest using AES-256
- Multi-tenant architecture with strict data isolation between organizations
- Regular security audits and vulnerability assessments
- Access controls and authentication managed through Amazon Cognito
- Automated backups with point-in-time recovery
5. Third-Party Services
We use the following third-party services to operate the platform:
- Amazon Web Services (AWS) — Cloud infrastructure, data storage, and hosting
- Amazon Cognito — User authentication and identity management
- Stripe — Payment processing and subscription billing (we never store your full payment card details)
Each third-party provider has its own privacy policy governing the data they process on our behalf. We do not sell your personal information to third parties.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you
- Correction — Request correction of inaccurate or incomplete data
- Deletion — Request deletion of your personal data, subject to legal retention requirements
- Data Portability — Request your data in a machine-readable format
- Objection — Object to certain types of data processing
- Withdrawal of Consent — Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us through our contact page.
7. Cookies and Tracking
We use the following cookies:
- Essential Cookies — Required for authentication and session management (e.g., authentication tokens)
- Functional Cookies — Remember your preferences and settings
- Analytics Cookies — Help us understand how the Service is used so we can improve it
You can control cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the Service.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. After account termination, we retain data for 30 days to allow for data export, after which it is permanently deleted. We may retain certain information as required by law or for legitimate business purposes such as resolving disputes and enforcing agreements.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, for active subscribers, by email at least 30 days before changes take effect.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us through our contact page.