Privacy Policy

This Privacy Policy describes how OnlyWorks ("we", "us", or "our") collects, uses, and shares information about you when you use our productivity verification platform, website, and related services (collectively, the "Services").

We are committed to protecting your privacy and ensuring you understand how your information is handled. Please read this policy carefully to understand our practices regarding your personal data.

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, and profile details when you create an account.

• Work Session Data: Screenshots, activity timestamps, application usage, and productivity metrics captured during active tracking sessions.

• Payment Information: Billing details processed securely through Stripe. We do not store full credit card numbers.

• Communications: Messages you send to us, including support requests and feedback.

• Device Information: Browser type, operating system, device identifiers, and IP address for security and analytics purposes.

We use the information we collect to:

• Provide, maintain, and improve our Services • Generate productivity reports and verification documents • Detect and prevent fraudulent activity and automation • Process payments and send related information • Send technical notices, updates, and security alerts • Respond to your comments, questions, and support requests • Monitor and analyze trends, usage, and activities • Personalize and improve your experience

We do not sell your personal information. We may share information in the following circumstances:

• With Your Consent: When you explicitly authorize sharing with third parties.

• Service Providers: With vendors who perform services on our behalf, subject to confidentiality obligations.

• Employers/Clients: Work session data may be shared with authorized parties as part of the verification service, based on your settings.

• Legal Requirements: When required by law or to protect our rights, privacy, safety, or property.

• Business Transfers: In connection with any merger, acquisition, or sale of company assets.

We implement industry-standard security measures to protect your information:

• All data is encrypted in transit using TLS 1.3 • Data at rest is encrypted using AES-256 encryption • Regular security audits and penetration testing • Access controls and authentication requirements • Secure cloud infrastructure with SOC 2 compliance

While we strive to protect your personal information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

We retain your information based on your subscription plan:

• Free Plan: Work session data retained for 7 days • Pro Plan: Work session data retained for 90 days • Enterprise Plan: Custom retention policies available

Account information is retained until you delete your account. You can request deletion of your data at any time through your account settings or by contacting us.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you • Correction: Request correction of inaccurate personal information • Deletion: Request deletion of your personal information • Portability: Request an export of your data in a portable format • Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, contact us at privacy@only-works.com or use the controls in your account settings.

We use cookies and similar technologies to:

• Keep you logged in and remember your preferences • Understand how you use our Services • Improve performance and security • Provide analytics and insights

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Services.

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: privacy@only-works.com

Address: OnlyWorks Inc. 123 Privacy Lane San Francisco, CA 94105

We will respond to your inquiry within 30 days.