Privacy Policy
Last Updated: 11 February 2026
A. Introduction
Workmind ("Workmind," “we,” “us,” or “our”) respects your privacy and takes the protection of personal data seriously. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website or use our cloud-based software platform and related services (the “Services”).
This Privacy Policy is designed to help you understand how your personal data is used, the choices available to you, and how you can exercise your rights.
B. Who This Policy Applies To
This Privacy Policy applies to:
- visitors to our website
- users of our Services
- customers and prospective customers
- individuals whose personal data is processed by Workmind on behalf of our customers
In many cases, Workmind processes personal data on behalf of business customers, who act as the data controller. In those cases, this Privacy Policy applies to Workmind’s role as a service provider or data processor.
C. What Personal Data We Collect
The personal data we collect depends on how you interact with Workmind and may include:
1. Account and Contact Information
When you create an account or communicate with us, we may collect personal data such as: name, email address, company name, job title, contact details, etc.
2. Platform and Usage Information
When you use the Services, we may collect non-personal data, such as log data, device and browser information, IP address, usage activity within the platform
3. Authentication Information
If you use single sign-on (SSO) services (such as Google), we receive authentication information in accordance with your SSO provider’s privacy settings.
4. Communications
We collect personal data that you provide when you contact us, including support requests, emails, chat messages, or feedback.
5. Billing Information
Billing and payment processing for Services are handled by third-party payment processors (such as Stripe). Workmind does not store full payment card or bank account details. We may receive non-personal data in the form of billing-related metadata such as subscription status, invoices, and payment confirmations.
6. Information Processed on Behalf of Customers
Our customers may upload or provide personal data to the Services in connection with their use of the platform. Workmind processes this data solely in accordance with customer instructions and applicable agreements.
7. Data We Do Not Intentionally Collect
Workmind does not intentionally collect: health data, biometric data, government-issued identification numbers or other special category or sensitive personal data, or personal information from children 13 years of age or under.
D. How We Use Personal Data
We use personal data for the following purposes:
Providing and Operating the Services To authenticate users, deliver functionality, and respond to inquiries or support requests.
Improving and Developing the Services To analyze usage, maintain performance, improve features, and develop new capabilities.
Security and Fraud Prevention To protect the integrity of our systems, prevent abuse, and maintain a secure environment.
Communications To send service-related communications, account notifications, and administrative messages. Marketing communications are optional and can be opted out of at any time.
Legal and Compliance Purposes To comply with applicable laws, regulations, and contractual obligations, and to enforce our terms and policies.
E. Legal Bases for Processing (Where Applicable)
Where required by applicable data protection laws, we process personal data based on one or more of the following legal grounds:
- your consent
- performance of a contract
- compliance with legal obligations
- legitimate business interests that do not override your rights
F. How We Share Personal Data
We may share personal data with:
Service Providers and Subprocessors Trusted third parties that help us operate the Services (such as hosting, analytics, customer support, and billing).
Professional Advisors Legal, accounting, auditing, or insurance providers as necessary.
Compliance and Safety Authorities Where required to comply with law, protect rights, or respond to lawful requests.
Business Transactions In connection with a merger, acquisition, financing, or similar transaction, subject to appropriate safeguards.
G. Data Transfers
Personal data may be transferred to and processed in countries other than the country in which it was collected. Where required by applicable law, Workmind implements appropriate safeguards to protect personal data, such as contractual protections with service providers.
H. Marketing Communications
You may opt out of receiving marketing communications at any time by using the unsubscribe link provided. You will continue to receive essential service-related communications.
I. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve our website and Services. Where required by law, we obtain consent before placing non-essential cookies. You may manage cookie preferences through your browser settings or applicable consent tools.
J. Data Security
We implement administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, or disclosure. No system can be guaranteed to be completely secure, and we cannot guarantee absolute security.
K. Data Retention
We retain personal data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. When personal data is no longer required, we delete or anonymize it, or securely isolate it until deletion is possible.
L. Children’s Data
The Services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected personal data from a child, please contact us.
M. Your Rights
Depending on your location and applicable law, you may have rights regarding your personal data, including the right to:
- access your personal data
- correct or update your information
- request deletion
- object to or restrict certain processing
- withdraw consent
- request data portability
To exercise these rights, contact us at the email address below. If your data is processed on behalf of a Workmind customer, you may need to contact that customer directly.
For your rights under the several U.S. States, please see Section O, below.
N. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date and post the revised policy. Material changes may be communicated through additional notice.
O. U.S. State Privacy Laws.
California Privacy Rights Disclosure
If you are a California resident, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), the California Online Privacy Protection Act (CalOPPA), provides you additional rights with the respect to your Personal Information. California law permits our customers who are California residents to request certain information about our disclosure of their personal information to third parties for direct marketing purposes during the preceding calendar year. This request is free and may be made once a year. To make such a request, see Section L below.
California law also provides you with the following additional rights with respect to your Personal Information:
The right to know what personal information we have collected, used, disclosed and sold about you. You may submit a request to know by using the contact information detailed in this Section. You also may designate an authorized agent to make a request for access on your behalf.
The right to request that we delete any personal information we have collected about you. You may submit a request for deletion by using the contact information detailed in this Section. You also may designate an authorized agent to make a request for deletion on your behalf.
Connecticut Data Privacy Rights.
If you are a Connecticut resident, (Public Act No. 22-15) An Act Concerning Personal information Privacy and Online Monitoring provides you additional rights with respect to your personal information. The Act grants Connecticut consumers the right to (A) access, correct, delete and obtain a copy of personal information that we collect, and (B) opt out of the processing of personal information for the purposes of (i) targeted advertising, (ii) certain sales of personal information, or (iii) profiling.
Utah Consumer Privacy Rights.
If you are a Utah resident, the Utah Consumer Privacy Act (UCPA) (S.B. 227) gives consumers a number of rights related to their personal information, including the right to: (A) access and delete personal information, (B) opt out of the collection and use of personal information for certain purposes, and (C) obtain a copy of their personal information.
Virginia Consumer Data Privacy Protection Act.
If you are a Virginia resident, the Virginia Consumer Data Protection Act (“VCDPA”) (Va. Code § 59.1-575) allows for consumers to request that the company collecting their personal information: (A) confirm if the company is actually processing their personal information, (B) correct inaccuracies in the consumer’s personal information that is collected by the company, (C) delete personal information provided by or obtained about the consumer, (D) obtain copies of the personal information collected by the company, and (E) opt out of the processing of personal information for purposes of targeted advertising, the sale of personal information, or further profiling.
Colorado Protect Personal Data Privacy Act.
If you are a Colorado resident, the Protect Personal information Privacy Act (SB21-190) gives consumers a number of rights related to their personal information, including the right to: (A) access and delete personal information, (B) opt out of the collection and use of personal information for certain purposes, and opt out of secondary use of such data.
Delaware Personal Data Privacy Act.
If you are a Delaware resident, the Delaware Personal Data Privacy Act (HB-154) gives consumers a number of rights related to their personal information, including the right to: (A) to know what information is being collected about them, (B) see the information, (C) correct any inaccuracies, or (D) request deletion of their personal information that is being maintained by entities or people.
Iowa Consumer Data Protection Act.
If you are an Iowa resident, the Iowa Consumer Data Protection Act (ICDPA) gives consumers a number of rights related to their personal information, including the right to: (A) to know what information is being collected about them, (B) see the information, (C) correct any inaccuracies, or (D) request deletion of their personal information that is being maintained by entities or people.
Montana Consumer Data Privacy Act.
If you are a Montana resident, the Montana Consumer Data Privacy Act (MCDPA) companies who collect personal information from Montana residents may receive clear consent before processing such personal information. The Act also grants Montana residents the right to (A) access, correct, delete and obtain a copy of personal information that we collect, and (B) opt out of the processing of personal information for the purposes of targeted advertising.
Oregon Consumer Privacy Act.
If you are an Oregon resident the Oregon Consumer Privacy Act (SB-619) gives consumers a number of rights related to their personal information, including the right to: (A) access and delete personal information, (B) opt out of the collection and use of personal information for certain purposes, and (C) obtain a copy of their personal information.
Texas Data Privacy and Security Act.
If you are a Texas resident the Texas Data Privacy and Security Act (HB-04F) allows for Texas residents to request that the company collecting their personal information: (A) confirm if the company is actually processing their personal information, (B) correct inaccuracies in the consumer’s personal information that is collected by the company, (C) delete personal information provided by or obtained about the consumer, (D) obtain copies of the personal information collected by the company, and (E) opt out of the processing of personal information for purposes of targeted advertising, the sale of personal information, or further profiling.
Nebraska Data Privacy Act.
If you are a Nebraska resident, (Legislative Bill 1074) the Nebraska Data Privacy Act provides you additional rights with respect to your personal data. The Act grants Nebraska consumers the right to (A) access, correct, delete and obtain a copy of personal data that we collect, and (B) opt out of the processing of personal data for the purposes of (i) targeted advertising, (ii) certain sales of personal data, or (iii) profiling.
New Hampshire Expectation of Privacy Act.
If you are a New Hampshire resident, (Senate Bill 255) under the Expectation of Privacy Act, you have the following rights: (1) Confirm whether or not certain businesses are processing your personal data; (2) Obtain Access to your personal data being processed by those businesses; (3) Correct inaccuracies in your personal data being processed by those businesses; (4) Delete personal data provided by, or obtained about, you by those businesses; (5) Obtain a copy of your personal data in a portable format; and (6) Opt-out of the future processing of personal data for purposes of: (a) targeted advertising, (b) the sale of personal data, or (c) certain types of automated profiling.
New Jersey Data Privacy Law.
If you are a New Jersey resident, the New Jersey Data Privacy Law P.L. 2023, c. 266 (NJDPL) gives consumers a number of rights related to their personal data, including the right to: (A) know what information is being collected about them, (B) see the information, (C) correct any inaccuracies, or (D) request deletion of their personal data that is being maintained by entities or people.
Tennessee Data Privacy Law.
If you are a Tennessee resident, the Tennessee Information Protection Act (TIPA), (HB 1181) allows for consumers to request that the company collecting their personal data: (A) confirm if the company is actually processing their personal data, (B) correct inaccuracies in the consumer’s personal data that is collected by the company, (C) delete personal data provided by or obtained about the consumer, (D) obtain copies of the personal data collected by the company, and (E) opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or further profiling.
Minnesota Data Privacy Law.
If you are a Minnesota resident, the Minnesota Consumer Data Privacy Act (MCDPA) (H4757-4) gives consumers a number of rights related to their personal data, including the right to: (A) see what data is collected, (B) understand the purpose for its collection, (C) see the third parties that the data is shared with, and (D) opt out of the collection and use of personal data for certain purposes.
Maryland Data Privacy Law.
If you are a Maryland resident, the Maryland Online Data Privacy Act (MODPA) aims to protect the privacy and personal data of Maryland residents by regulating its collection, processing, and use. Specifically, MODPA allows Maryland consumers to request that the company collecting their personal data: (A) confirm if the company is actually processing their personal data, (B) correct inaccuracies in the consumer’s personal data that is collected by the company, (C) delete personal data provided by or obtained about the consumer, (D) obtain copies of the personal data collected by the company, and (E) opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or further profiling.
Indiana Consumer Data Protection Act.
If you are an Indiana resident, the Indiana Consumer Data Protection Act (Senate Bill 5) gives consumers a number of rights related to their personal information, including the right to: (A) to know what information is being collected about them, (B) see the information, (C) correct any inaccuracies, or (D) request deletion of their or their child’s personal information that is being maintained by entities or people.
Kentucky Consumer Data Protection Act.
If you are a Kentucky resident, the Kentucky Data Protection Act (KRS 367.3611) allows for Kentucky residents to request that the company collecting their personal information: (A) confirm if the company is actually processing their personal information, (B) correct inaccuracies in the consumer’s personal information that is collected by the company, (C) delete personal information provided by or obtained about the consumer, (D) obtain copies of the personal information collected by the company, and (E) get consent prior to using or processing personal information for purposes of targeted advertising or the sale of personal information.
Rhode Island Data Transparency and Privacy Protection Act.
If you are a Rhode Island resident, the Rhode Island Data Transparency and Privacy Protection Act (H 7787) allows for Rhode Island residents to request all categories of personal data that the controller collects through the website or online service about customers; (ii) Identify all third parties to whom the controller has sold or may sell customers’ personally identifiable information; and (iii) Identify an active electronic mail address or other online mechanism that the customer may use to contact the controller; (a) If a controller sells personal data to third parties or processes personal data for targeted advertising, the controller shall clearly and conspicuously disclose such processing.
L. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact:
Workmind, Inc. Payson, Utah United States of America
Email: support@workmind.cloud Website: https://workmind.cloud