Workly
Book a Time
Cybersecurity & Data Privacy

Privacy Policy & Security Standards

Last updated: October 28, 2026 · Compliant with GDPR, CCPA, and HIPAA Security Standards.

Zero Data Selling Commitment:

Workly never sells, rents, or monetizes client business data, customer lists, or proprietary files. All information shared is governed by enterprise encryption and zero-trust protocols.

1. Information We Collect

We collect information you provide directly when filling out discovery forms, booking via Calendly, or communicating with our talent coordinators:

  • Contact Information: Full name, corporate email address, phone number, and company name.
  • Staffing Requirements: Desired industry domain, required weekly hours, and software stack prerequisites.
  • Billing Information: Processed directly via PCI-DSS Level 1 certified processors (Stripe). Workly never stores raw credit card numbers.

2. Cybersecurity Protocols

Workly implements rigorous technical and administrative safeguards:

  • 256-Bit TLS Encryption: All web requests and API transmissions are encrypted using modern Transport Layer Security.
  • Password Delegation: We mandate password sharing via 1Password or LastPass vaults without revealing plaintext secrets.

3. HIPAA Compliance for Healthcare Clients

For clients in the healthcare vertical, Workly executes Business Associate Agreements (BAAs). Placed healthcare assistants complete annual HIPAA certification, operate on dedicated secure profiles, and maintain strict data privacy.

4. Google Analytics & Telemetry Sovereignty

We provide a reserved slot in the website header for your designated Google Analytics (gtag.js) script, ensuring you retain total sovereignty over user analytics.

5. Contact Our Privacy Team

For data inquiries or deletion requests, contact privacy@workly.staff.