Privacy Policy
This Privacy Policy explains how Workalizer handles personal data in connection with our website and our analytics service. It describes who is responsible for your data, what we process, why, and what rights you have. Workalizer is developed and operated by InfoHub Works Limited, a company registered in England and Wales (company number 11499103), with its registered office at 124 City Road, London, England, EC1V 2NX. Workalizer processes some data as a data controller (e.g. website and account-related data) and other data as a data processor on behalf of the organization that uses our service (e.g. Google Workspace data used for analytics).
1. Who Is Responsible for Your Data
Controller for website and account data: When you use our website, request information, or we manage your organization's account and billing, InfoHub Works Limited (operating as Workalizer) acts as data controller. Our contact details are available on the Contact page. Our registered office address is 124 City Road, London, England, EC1V 2NX.
Processor for Google Workspace analytics: When our service fetches and aggregates data from Google Workspace (Gmail, Drive, Meet, Chat) to produce analytics and insights, we do so on behalf of your organization. Your organization is the data controller for that processing; Workalizer acts as a data processor. We process that data only according to the organization's instructions and our contractual and legal obligations. We do not collect or store raw activity logs; we fetch data via Google APIs and process it to generate aggregated metrics and insights.
2. What Data We Process and Why (Controller Activities)
When we act as controller, we may process:
- Account and contact data: name, email, organization name, and similar details you or your organization provide when signing up, contacting us, or using support. We use this to provide the service, manage accounts, and communicate with you.
- Usage and technical data: information about how you use our website and service (e.g. login events, feature usage, device or browser information) to operate, secure, and improve the service.
- Cookies and similar technologies: we may use cookies and similar technologies on our website for essential operation, security, and analytics. You can manage preferences via your browser or our cookie notice where provided.
We process this data on the basis of contract performance, legitimate interests (e.g. security and improvement of the service), and, where required, consent.
3. Data We Process as Processor (Google Workspace Analytics)
When your organization uses Workalizer for Google Workspace analytics, we receive and process data that Google makes available via the APIs and scopes the organization has authorized. This may include identifiers, metadata, and aggregated or derived metrics (e.g. activity counts, meeting duration, document events). We do not build or retain separate logs of user activity; we fetch data, aggregate or derive analytics, and present them in the service. The purposes and lawful basis for this processing are determined by your organization as controller. We process such data only in accordance with the organization's instructions, our Data Access Policy, and applicable data protection law (including GDPR Article 28). For details, see our Data Access Policy and GDPR Compliance page.
4. How Long We Keep Data
We retain personal data only as long as necessary for the purposes described in this policy or as required by law or contract. For controller data (e.g. account, contact), we typically retain it for the duration of the relationship and for a limited period thereafter for legal and operational purposes. For data we process as processor, retention follows the instructions of the controller (your organization) and our contractual commitments.
5. Sharing and International Transfers
We do not sell your personal data. We may share data with service providers (subprocessors) that help us operate the service (e.g. hosting, support tools), under contracts that protect your data. Where we transfer personal data outside the European Economic Area (EEA), we use appropriate safeguards such as adequacy decisions, standard contractual clauses, or other mechanisms recognized under GDPR. You may request more information about transfers and safeguards via our Contact page.
6. Your Rights
Under the GDPR and similar laws, you may have the right to:
- Access: obtain confirmation of whether we process your data and a copy of your data.
- Rectification: have inaccurate data corrected.
- Erasure: request deletion of your data in certain circumstances.
- Restriction: request that we limit processing in certain situations.
- Portability: receive your data in a structured, machine-readable format where applicable.
- Object: object to processing based on legitimate interests or for direct marketing.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
- Complain: lodge a complaint with a supervisory authority (e.g. in your country of residence or work).
To exercise these rights in relation to data for which we are controller, please contact us via the Contact page. For data we process as processor (e.g. Google Workspace analytics), your organization is the controller; you should direct requests to your organization first. We will support the controller in responding to your request where required.
7. Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or alteration, including encryption, access controls, and secure development practices. We require our subprocessors to protect data in line with our commitments and applicable law.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on our website and, for material changes, we will notify you as required by law (e.g. by email or a notice on the service). The date of the last update is indicated at the bottom of the policy where applicable.
9. Contact
For privacy-related questions, to exercise your rights, or to contact our data protection contact, please use the Contact page or the contact details published on our website. You may also write to us at our registered office: InfoHub Works Limited, 124 City Road, London, England, EC1V 2NX.