Privacy Policy
Last updated: April 4, 2026
Who we are
Workendo is a platform for document management and personnel planning.
- Privacy email: soporte@workendo.com
To request the full identification details of the data controller, write to soporte@workendo.com.
Workendo's role with your data
Workendo has a dual role depending on how you use the platform:
- Data controller for your account data (email, profile, preferences, billing information). This applies to all users.
- Data processor when an organisation (company or self-employed professional) enters data about its employees, assets or clients through the platform. In this case, the organisation is the controller. The relationship is governed by a DPA available in Settings > Legal.
What data we collect
| Data | When | Purpose |
|---|---|---|
| Email and password | Registration | Create and manage your account |
| First and last name | Profile | Identification within the platform |
| Professional data | Profile (optional) | Skills, training, experience |
| Billing data | Paid subscription | Process payments via Stripe |
| Usage data | Browsing | Improve the service, aggregated statistics |
| Uploaded documents | Platform use | Document management, OCR |
| IP and user agent | Legal consents | Auditable record of acceptances |
Legal basis
| Processing | Legal basis (GDPR) |
|---|---|
| Account management and service delivery | Art. 6.1.b -- Performance of a contract |
| Billing and tax obligations | Art. 6.1.c -- Legal obligation |
| Service communications | Art. 6.1.b -- Performance of a contract |
| Product improvement (aggregated data) | Art. 6.1.f -- Legitimate interest |
| Marketing communications | Art. 6.1.a -- Consent |
| OCR processing with AI | Art. 6.1.b -- Performance of a contract |
How long we keep your data
- Active account: for as long as you maintain your account.
- After cancellation: 30 days to export your data, then it is deleted.
- Legal obligations: billing data is retained for the period required by law (typically 4-6 years).
- Consents: the record of acceptances is kept as legal evidence.
Who we share your data with
We do not sell your data. We only share it with providers necessary for the service:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Infrastructure and database | EU (Frankfurt) |
| Stripe | Payment processing | EU / US (with SCCs) |
| Google Gemini | Document OCR | EU / US (with SCCs) |
| Resend | Transactional email delivery | EU / US (with SCCs) |
The full list of sub-processors is available in Settings > Legal > Sub-processors.
Where transfers outside the EEA take place, European Commission Standard Contractual Clauses (SCCs) are applied.
Artificial intelligence
Workendo uses Google Gemini exclusively to extract text from documents (OCR). The data:
- Is not used to train AI models.
- Is not used to make automated decisions about people.
- Requires human verification before being saved.
More information is available in Settings > Legal > AI Transparency.
Your rights
Under the GDPR, you can:
- Access your personal data.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict the processing.
- Port your data to another service.
- Object to processing based on legitimate interest.
- Not be subject to automated decisions.
To exercise any of these rights, write to soporte@workendo.com. We will respond within a maximum of 1 month.
You may also file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Within the platform, you can manage your data directly from Profile > Settings > Legal (consent history, export data, request account deletion).
Changes to this policy
If we modify this policy, we will notify you by email and through a notice on the platform with at least 30 days' advance notice.
soporte@workendo.com
Document updated on April 4, 2026.