Privacy Policy

1 Information We Collect

Account Information

When you create an AsanWork account, we collect your name, email address, company name, job title, phone number, and password. If you sign up through a third-party provider, we may receive basic profile information as authorised by that provider.

Usage Data

We automatically collect information about how you interact with the Service, including IP address, browser type and version, device information, pages viewed, actions taken, timestamps, and referring URLs. This data helps us understand usage patterns and improve the platform.

Payment Data

Payment processing is handled by Paddle. We do not store your credit card number or full payment details on our servers. Paddle collects billing information such as your name, billing address, and payment method in accordance with their own privacy policy. We receive transaction confirmations and subscription status data from Paddle to manage your account.

2 How We Use Your Information

We use the information we collect for the following purposes:

• ● Providing the Service — to operate, maintain, and deliver the features of AsanWork, including shift scheduling, timesheet tracking, compliance management, invoicing, and payroll workflows.
• ● Communications — to send you account-related emails, security alerts, product updates, and (with your consent) marketing communications. You can opt out of marketing emails at any time.
• ● Improvement — to analyse usage trends, diagnose technical issues, and develop new features and improvements to the platform.
• ● Security & Fraud Prevention — to detect, prevent, and respond to security incidents, fraud, and unauthorised access to the Service.
• ● Legal Compliance — to comply with applicable laws, regulations, and legal processes.

3 Data Storage & Security

Your data is stored on infrastructure provided by DirectAdmin hosting, with Cloudflare providing DNS resolution, CDN, and DDoS protection. Our websites may also be served through Wix infrastructure.

We implement industry-standard security measures including:

• ● Encryption of data in transit (TLS/SSL) and at rest
• ● Regular security audits and vulnerability assessments
• ● Role-based access controls for all internal systems
• ● Automated backups and disaster recovery procedures

While no system is completely secure, we take every reasonable precaution to protect your information. If we become aware of a data breach that affects your personal data, we will notify you promptly in accordance with applicable law.

4 Cookies & Tracking

AsanWork uses cookies and similar technologies to maintain your session, remember your preferences, and analyse usage of the Service.

• ● Essential Cookies — required for the Service to function correctly (authentication, security, load balancing).
• ● Analytics Cookies — help us understand how users interact with the platform so we can improve it. These may be set by third-party analytics providers.
• ● Preference Cookies — remember your settings and choices to provide a more personalised experience.

You can control cookie settings through your browser. Disabling essential cookies may affect the functionality of the Service.

5 Third-Party Services

We integrate with and share data with select third-party service providers who assist in operating our platform:

• ● Paddle — handles payment processing, subscription management, and tax compliance. Paddle processes your billing data under their own privacy policy.
• ● Cloudflare — provides DNS services, content delivery network (CDN), and security protections including DDoS mitigation.
• ● DirectAdmin — provides hosting infrastructure for application and data storage.
• ● Wix — provides infrastructure for marketing and informational web content.

These providers are contractually obligated to protect your data and use it only for the purposes we specify. We do not sell your personal information to third parties.

6 Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• ● Account data is retained for the lifetime of your account and for a reasonable period after deletion to fulfil legal obligations and resolve disputes.
• ● Transaction records are retained as required by applicable tax and financial regulations.
• ● Analytics data is aggregated and anonymised where possible, and individual identifiers are removed after a rolling period.

When data is no longer needed, it is securely deleted or irreversibly anonymised.

7 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

GDPR Rights (European Economic Area & UK)

• ● Access — request a copy of the personal data we hold about you.
• ● Rectification — request correction of inaccurate or incomplete data.
• ● Erasure — request deletion of your personal data ("right to be forgotten").
• ● Restriction — request restriction of processing in certain circumstances.
• ● Portability — receive your data in a structured, commonly used, machine-readable format.
• ● Objection — object to processing based on legitimate interests, including direct marketing.

CCPA Rights (California Residents)

• ● Right to Know — request disclosure of the categories and specific pieces of personal information collected.
• ● Right to Delete — request deletion of personal information we have collected.
• ● Right to Opt-Out — opt out of the sale of personal information. AsanWork does not sell personal data.
• ● Non-Discrimination — we will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, please contact us at privacy@asanwork.com. We will respond to your request within the timeframe required by applicable law.

8 International Data Transfers

AsanWork operates globally. Your personal data may be transferred to, stored, and processed in countries other than your own. We ensure that such transfers are conducted in accordance with applicable data protection laws, using appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms where required.

9 Children's Privacy

AsanWork is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16 without appropriate consent, we will take steps to delete that information promptly.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or by posting a prominent notice on the Service prior to the changes taking effect. We encourage you to review this page periodically.

11 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: