Privacy policy

What is collected

• Your account. Your email address and name, and a password if you sign up with one. Passwords are stored hashed, never as typed. If you sign in with Google or Apple, WorkSolo receives the name and email address on that account and nothing else.
• Your business. What you enter in Settings: business name, trade, phone, email, default tax rate, and the footer text you add to estimates and invoices.
• Your customers. The names, business names, phone numbers, email addresses, addresses and notes you record for the people you work for.
• Your work. Estimates, invoices, line items, your price book (including what things cost you), payments you record, and a timeline of what happened to each document: when it was sent, approved or declined, paid or reminded.
• Stripe status. The id of your connected Stripe account and whether Stripe has cleared it to take payments, plus which subscription plan you are on. Not the details you gave Stripe.
• How you use the app. Which screens you open and which controls you tap, and when you do the things the app is for: send an estimate, record its outcome, send an invoice or a reminder, record a payment, change your price book, start a subscription. Each of those is recorded with how it was done (email, text or link) and what it came to (an amount, a plan name, a count of line items), but not the customer it was for or the words you typed. When something fails, the error message you were shown and any unexpected error inside the app are recorded too, so it can be fixed. These records carry your account id, email and name, your device type, operating system, browser and screen size, and the IP address they arrived from. This is done with PostHog, an analytics service; see "Who it is shared with" below.
• Session replays. To work out why something went wrong or where the app is confusing, a session may be replayed: a reconstruction of what was on your screen and where you tapped, built from the app's layout rather than filmed. Both what you type and the text on screen are masked before anything leaves your device: a replay shows the app's screens, buttons and taps with the words blanked out, so your customers' names, amounts and your business details are not in it. Replays are looked at by WorkSolo to troubleshoot, not shared, and are held by PostHog with the other usage records.
• Technical. The IP address on sign-in and password-reset requests, used to limit repeated attempts, and the ordinary server logs our hosting provider keeps. The app contains no advertising SDK, does not collect an advertising id, and asks for no device permission beyond network access. It does not read your location, contacts, photos or camera.

What is not collected

Card numbers and bank details. Those go directly to Stripe on Stripe-hosted pages and never reach WorkSolo's servers. The same goes for the identity and tax details Stripe asks for when you set up payouts: you give them to Stripe, and WorkSolo only learns whether Stripe was satisfied.

Why

To run the service, to send your estimates and invoices to your customers, to chase overdue invoices when you ask it to, and to bill your subscription. Usage records are used to see which parts of the app get used, where people give up, and what breaks, so the next version is better. Nothing is sold, and nothing is used for advertising.

Email sent on your behalf

When you send an estimate, invoice or reminder by email, WorkSolo emails it to the address you recorded for that customer, under your business name. On a plan that includes automatic chasing, WorkSolo also emails overdue-invoice reminders to those customers on a schedule and sends you a daily digest of what it did; you can switch that off in Settings under "Chase overdue invoices". Every email is recorded in the document's timeline so you can see what your customer received. A text message goes through your own phone's messaging app instead, so nothing about it reaches us.

Links your customers open

Each estimate and invoice has a private link made from an unguessable token. Anyone who has the link can view that one document, so share it the way you would share the document itself. When a customer approves or declines an estimate through the link, that decision and the time it happened are recorded in your timeline. When a customer pays an invoice by card, Stripe collects their payment details and WorkSolo records only the amount and that it was paid. WorkSolo does not track who opened a link or from where.

Who it is shared with

• Stripe. Your name and email address, to bill your subscription; the invoice amount and number, to create a payment link; and whatever you give Stripe directly during Connect onboarding. Stripe's own privacy policy covers what it does with that.
• Resend. Delivers the email WorkSolo sends: it receives the recipient's address and the content of the estimate, invoice, reminder, digest or password reset being sent.
• Convex. Application hosting and the database WorkSolo runs on, in the United States. Everything listed above is stored there.
• Google and Apple. Only if you choose to sign in with one of them, and only to confirm who you are.
• PostHog. Holds the usage and error records described under "How you use the app", in the United States. They reach PostHog through WorkSolo's own server, not from your device directly. PostHog processes them for WorkSolo and nothing else; its own privacy policy covers how it runs its service.

No one else. WorkSolo does not sell data, share it with advertisers, or hand it over except where the law requires.

Your customers

Your customers' details are entered by you, not by them. You're responsible for having a lawful reason to hold that information and to send them email; WorkSolo processes it on your behalf to run the service. If one of your customers asks about the data you hold on them, that request is for you to answer; WorkSolo will help you export or delete it on request.

How it is protected

Data travels over encrypted connections and is stored encrypted at rest by our hosting provider. Every record is tied to the account that created it, and no account can read another's. Repeated sign-in attempts are rate-limited. No system is perfectly secure, so keep your password to yourself and sign out of devices you no longer use.

Retention and deletion

Data is kept while your account is open. You can delete your account yourself, at any time, from the app: Settings, then Account, then "Delete account". That removes your account, your business settings, your customers, estimates, invoices, price book and timeline from WorkSolo's live systems straight away, and cancels any subscription. There is no undo and no recovery period, so export anything you need for your records first.

A few things are outside WorkSolo's reach and are not deleted with the account: emails already delivered to your customers; the records Stripe holds of payments, payouts and your subscription, which Stripe keeps under its own policy; and your connected Stripe account itself, which belongs to you and can be closed with Stripe. Copies of your data in our hosting provider's logs and backups expire on their own schedule, within 30 days.

Deleting your account also asks PostHog to delete the usage records, session replays and error reports tied to it. PostHog carries that out in the background, and WorkSolo cannot see it fail, so it is an attempt rather than a guarantee. If you want it confirmed, email [email protected] from the address on your account and we will check with PostHog and follow up. You can also write to PostHog directly at [email protected].

If you can no longer open the app, or want a copy of your data before deleting it, email [email protected] from the address on your account and we will do it for you.

Children

WorkSolo is for people running a business and is not directed at anyone under 18. We do not knowingly collect information from children; if you believe a child has created an account, tell us and it will be deleted.

Changes and contact

When this policy changes, the effective date at the top changes with it, and a change that alters what is collected or shared is announced in the app before it takes effect. Questions about this policy go to [email protected].