Log inGet started freeStart free

Privacy Policy

Effective Date: July 1, 2026 · Last updated: November 4, 2026

1. Introduction

This Privacy Policy explains how Universal Workflow ("UWF") collects, uses, discloses, and safeguards personal data when you use our platform. It is designed to meet the requirements of the GDPR/UK GDPR, CCPA/CPRA, PIPEDA, CASL, LGPD, and other applicable data protection laws.

2. Data We Collect

  • Account and contact data: name, email, phone, company, billing address.
  • Job and business data: quotes, work orders, purchase orders, invoices, customer records, files.
  • Payment data: processed by Stripe; UWF does not store full card numbers.
  • Usage data: pages viewed, features used, device/browser type, IP address.

3. How We Use Data

To provide the Service, process billing, deliver support, maintain security, improve the product, and — with consent or an existing relationship — send product updates. We do not sell personal data.

4. Sub-processors

  • Supabase — database and backend infrastructure.
  • Stripe — payment processing and billing.
  • Brevo — transactional and marketing email.
  • Netlify — application hosting and serverless functions.
  • Google (Google Ads and Google Analytics) — advertising and website visit measurement on our public website only (not inside your account).
  • Meta Platforms (Meta Pixel) — advertising measurement on our public website only (not inside your account).

5. Cookies and Advertising Measurement

On our public website (the homepage, the product, industry, pricing and resource pages, and the sign-in page) we use Google Ads and Google Analytics cookies and the Meta Pixel to measure which advertisements bring people to us and how visitors use those pages. When you create an account, request a demo or send us a message, we tell Google and Meta that it happened so we can see which ads work; we do not send them what you type into our forms. These tools are not used inside your account — once you sign in, no advertising or analytics tag runs, and your jobs, customers, invoices and financial data are never shared with Google, Meta or any advertising network.

Where the law requires opt-in consent (the EEA, the UK, Switzerland, Brazil and Quebec) these cookies and the Meta Pixel stay switched off until you accept. Elsewhere they are on by default: our cookie banner tells you about them on your first visit, and you can decline at any time, which takes effect straight away. To know which rule applies, your approximate location (country and province or state) is worked out from your IP address by Google and by our host, Netlify; we keep only the answer (opt-in or not) in your browser, for 7 days. If our host can't work out your location, the Meta Pixel treats you as being in an opt-in region. If your browser sends a Global Privacy Control signal, we treat it as declining advertising cookies and the Meta Pixel unless you click Accept. Whatever you choose, essential cookies needed to keep you signed in and secure continue to work.

To change your choice at any time, use the link below. Manage cookie choices

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing, under GDPR, CCPA/CPRA, PIPEDA, or equivalent laws. Contact privacy@universal-workflow.com to exercise these rights.

7. Security

We use encryption in transit and at rest, row-level security policies, and access controls to protect your data. See our Security Policy for details.

8. Retention

We retain data while your account is active and for a limited period after cancellation to allow export, unless a longer period is required for legal or tax purposes.

This is a condensed summary. The complete Privacy Policy is available on request or at our website.

Also see: Security Policy · Terms and Conditions. Questions: contact us.