Privacy Policy

1. Data controller

Volkan Akbulut (sole proprietorship, "Workigom"), Zümrütevler Mah. Ertuğrul Gazi Cad. Fuaye Çarşı No: 10 İç Kapı No: 10, Maltepe / İstanbul, Türkiye. Contact: info@workigom.com. For customer data you load into the Service, you are the controller and we act as your processor.

2. Data we process

Account data: name, email, phone, password (stored hashed), business name and plan.

Business data you add or connect: customers and their contact details, appointments, messages handled by the assistants (WhatsApp, Instagram and other channels), invoices and accounting documents, social media posts and media.

Technical data: device and browser information, IP address, language and security logs. Payment data is handled by our payment providers; we receive only the status and a reference of the payment.

Google data: if you connect a Google account, we access only the data you authorise, solely to provide the feature you enabled. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

3. Why we process it

To provide and secure the Service, run your assistants and calendars, bill and support you, prevent abuse, comply with legal obligations and improve reliability. Legal bases: performance of the contract, legitimate interests, legal obligation and, where required, consent.

4. AI processing

Messages and documents you ask the Service to handle are sent to AI model providers to generate replies, extract invoice data or create content. We do not sell your data and do not allow providers to use it to train their general models where our agreements provide for this.

5. Who we share data with

Only service providers needed to run the Service: hosting and database (Supabase, Vercel), AI providers, messaging and social platforms you connect (Meta/WhatsApp, Google, TikTok, X, LinkedIn, YouTube) and the social publishing partner Zernio, payment providers (Paddle, PayTR), and email delivery. We also disclose data when the law requires. We never sell personal data.

6. International transfers

Our providers may process data outside your country, including outside Türkiye and the EEA. We rely on contractual safeguards and, where applicable, the mechanisms recognised by law for such transfers.

7. Retention

We keep data while your account is active and for the period needed to meet legal, tax and dispute obligations. Uploaded social media files are temporary. After account deletion, data is deleted or anonymised within a reasonable period, except what we must retain by law.

8. Security

We use encryption in transit, access controls, row-level data isolation between businesses and monitoring. No system is perfectly secure; tell us at info@workigom.com if you suspect a problem.

9. Your rights

Depending on where you live (Türkiye KVKK Article 11, EU/UK GDPR, others) you may ask to access, correct, delete or export your data, object to or restrict processing, withdraw consent and complain to your data protection authority. Write to info@workigom.com; we answer within 30 days.

10. Cookies

We use only essential cookies and local storage (login session, language choice). We do not use advertising or third-party tracking cookies.

11. Children

The Service is for businesses and is not directed to people under 18.

12. Changes

We will post updates here and notify you of material changes.