Privacy Policy

This Privacy Policy explains how Loominfo Limited collects, uses, discloses, and protects personal information when you use WorkVib.

We comply with the New Zealand Privacy Act 2020 and, where they apply, GDPR, UK GDPR, CCPA/CPRA, PIPEDA, the Australian Privacy Act 1988, and similar privacy laws.

Who we are

Loominfo Limited, company number 9429052682902. Registered office: 17A Prictor Street, Papakura, Auckland, New Zealand. General privacy contact and Privacy Officer contact: support@workvib.com.

1. Information we collect

• Account information: name, email, phone, password hash, profile details, organization membership, role, and preferences.
• Workspace data: projects, tasks, comments, chat messages, notes, time logs, reports, files, automation logs, and team/client records.
• Billing data: subscription plan, billing email, tax and invoice details, payment status, and payment tokens or summaries from Paddle.
• Technical data: IP address, device, browser, operating system, pages visited, actions taken, timestamps, cookies, and error logs.
• Support data: messages, attachments, feedback, and other information you send to us.

2. Why we use it

• To provide, secure, operate, and improve WorkVib.
• To authenticate users, manage organizations, deliver notifications, and process billing.
• To provide support, prevent fraud and abuse, debug errors, and maintain service reliability.
• To comply with legal, tax, accounting, regulatory, and law-enforcement obligations.
• To send product updates or marketing communications where permitted; you can opt out of marketing at any time.

3. Data roles

For workspace data uploaded by your organization, your organization is generally the controller, agency, or business, and we act as processor, agent, or service provider. For data we collect directly to operate accounts, billing, security, and support, we are the controller or business.

4. Sharing and sub-processors

We do not sell personal information and do not share it for cross-context behavioral advertising. We share personal data with the sub-processors listed on our Sub-processors page, under contracts requiring appropriate safeguards.

We may disclose data where legally required, to protect rights and safety, or as part of a merger, acquisition, financing, or sale of assets where the recipient is bound by privacy obligations.

5. International transfers

WorkVib may process data in New Zealand, India, the United States, the European Union, and other locations where our infrastructure or sub-processors operate. Where required, transfers are protected by Standard Contractual Clauses, equivalent safeguards, encryption, access controls, and contractual commitments.

6. Retention

• Active accounts: retained while the account or workspace remains active.
• Closed accounts: deleted or anonymized within 30 days where reasonably possible, except where law requires longer retention.
• Billing and tax records: retained for the legally required period.
• Backups: retained for a limited rotation period and overwritten in the ordinary course.
• Security and operational logs: retained for troubleshooting, security, and compliance, usually for a limited period unless needed for an investigation.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal data, and to withdraw consent. Email support@workvib.com with your request and enough information for us to verify your identity.

New Zealand residents may complain to the Office of the Privacy Commissioner. EU, UK, California, Canada, Australia, and other residents may also contact their local supervisory authority where applicable.

8. Security

• TLS encryption in transit.
• Password hashing and secure token handling.
• Role-based access controls and workspace permissions.
• Network and application-layer protections such as rate limits, bot protection, and abuse monitoring where configured.
• Operational logging, backup routines, and incident-response processes.

No system is perfect. If a personal-data breach is likely to create risk to your rights, we will notify affected customers and regulators where required by law.

9. Cookies, children, and marketing

We use strictly necessary cookies for authentication, sessions, security, and preferences. Optional analytics cookies are used only where enabled and consented. See the Cookie Notice for details.

WorkVib is not directed to children under 16. If you believe a child has provided personal data, contact support@workvib.com.

You can opt out of marketing emails through the unsubscribe link or by contacting support. Essential service emails cannot be unsubscribed from while your account is active.

10. Changes

We may update this Privacy Policy. Material changes will be notified by email, in-product notice, or the website before they take effect where required.

Contact

Questions can be sent to support@workvib.com. Loominfo Limited, 17A Prictor Street, Papakura, Auckland, New Zealand. Company number: 9429052682902.