Privacy Policy

WorkflowPlus collects information that you provide directly when you create an account, complete your profile, purchase a subscription through the app, upload files, create projects, manage groups, invite team members, contact support, or otherwise use the service.

This information may include your name, username, email address, phone number where provided, profile details, company or organizational details, billing-related information, uploaded files, project content, group information, and other data you choose to submit through the platform.

We also collect information generated through your use of WorkflowPlus, including account activity, login and authentication events, device and browser information, usage records, interaction logs, settings, permissions, and information relating to projects, groups, reports, and administrative actions carried out within the service.

Where cookies, analytics tools, or similar technologies are used, WorkflowPlus may also collect technical and usage information such as IP address, session identifiers, browser type, operating system, referral information, pages visited, feature usage, approximate location derived from technical data, and interaction timing.

If you use WorkflowPlus as part of a team, organization, or group environment, certain information about your participation, permissions, assigned role, and activity within shared spaces may also be collected and made available to authorized administrators or managers in accordance with the service design and applicable settings.

WorkflowPlus uses personal data and service-related information to provide, operate, maintain, secure, and improve the platform and its related services.

This includes using information to create and manage accounts, authenticate users, verify email addresses, process subscriptions and related transactions, enable file uploads, support collaboration features, manage groups and permissions, generate reports, respond to support requests, and communicate necessary service-related information.

We may also use information to monitor usage, diagnose technical issues, prevent fraud, detect abuse, enforce our legal terms, maintain security, perform analytics, improve usability, develop new features, and protect the rights, safety, and integrity of WorkflowPlus, its users, and third parties.

Where permitted by law, WorkflowPlus may use limited information to send product updates, administrative notices, service changes, policy updates, security alerts, and other communications relevant to your use of the platform.

We process personal data only where we have an appropriate legal basis to do so, including where processing is necessary for contract performance, compliance with legal obligations, legitimate interests, or your consent where required under applicable law.

WorkflowPlus uses cookies and similar technologies to support essential platform functions, maintain secure sessions, remember preferences, improve performance, and better understand how users interact with the service.

These technologies may be used for functions such as keeping users signed in, preserving settings, supporting authentication flows, measuring usage patterns, identifying technical issues, protecting against misuse, and improving the reliability and usability of the platform.

Analytics-related tools may collect information such as pages viewed, features used, interaction patterns, browser and device details, approximate location derived from technical data, timestamps, referral data, and similar usage information.

Some cookies or analytics tools may process personal data or data that can reasonably be linked to a user or device. Where required by law, WorkflowPlus will rely on the appropriate legal basis, including consent where applicable, before placing or using non-essential cookies or similar technologies.

For additional details about the types of cookies used, how they function, and how you may manage cookie preferences, please refer to the WorkflowPlus Cookie Policy.

WorkflowPlus uses email communications to operate and secure the service, including for account registration, email verification, login-related notices, security alerts, purchase confirmations, subscription-related communications, password reset messages, support communications, and important administrative updates.

These communications are generally necessary for the operation, security, or administration of the platform and may be sent even where marketing communications are not enabled.

WorkflowPlus may also send service-related notices concerning policy changes, feature availability, account status, platform updates, or other matters that are important to your continued use of the service.

Where WorkflowPlus offers optional promotional or informational communications, users will be given the ability to opt out where required by applicable law. However, you may continue to receive essential operational or legal notices that are necessary for the service relationship.

You are responsible for providing a valid and accessible email address and for keeping your account contact information accurate and current.

WorkflowPlus may use carefully selected third-party service providers to support the operation of the platform, including providers that assist with hosting, infrastructure, analytics, email delivery, customer support, security, maintenance, or other operational needs.

At present, WorkflowPlus uses Mailgun for the delivery of certain account-related and authentication-related emails. In connection with that service, the user's email address and limited message-related metadata necessary to deliver the communication may be shared with Mailgun solely for email delivery and related operational purposes.

WorkflowPlus does not sell personal data to third parties. We share data with service providers only to the extent reasonably necessary for them to perform services on our behalf, subject to appropriate contractual, technical, and organizational safeguards where applicable.

We may also disclose information where required to comply with law, legal process, court orders, regulatory requests, or lawful government demands, or where disclosure is reasonably necessary to protect rights, investigate misuse, enforce legal terms, prevent fraud, or address security or safety concerns.

Where third-party providers process personal data on our behalf, WorkflowPlus seeks to ensure that such processing is limited to authorized purposes consistent with applicable data protection requirements.

WorkflowPlus retains personal data and service-related records only for as long as reasonably necessary to provide the service, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, and support legitimate operational needs.

Retention periods may vary depending on the type of data involved, the nature of the user relationship, the account status, the applicable legal requirements, and whether the data relates to billing, support, security, team administration, uploaded content, or compliance matters.

When an account is closed or access to the service ends, WorkflowPlus may delete or anonymize certain personal data and user content within a reasonable period, subject to any lawful need to retain information for backup integrity, legal compliance, fraud prevention, incident investigation, audit purposes, or the establishment, exercise, or defense of legal claims.

Where WorkflowPlus processes content on behalf of a business, team, or organization, retention and deletion outcomes may also depend on the permissions, administrative controls, contractual relationship, and lawful instructions associated with that customer environment.

If you would like more information about the retention of specific categories of personal data, you may contact WorkflowPlus using the contact route identified in these legal pages.

If you create a WorkflowPlus account, you may request deletion of your account and associated personal data through the in-app account deletion feature made available within WorkflowPlus.

WorkflowPlus also provides a web-based method for submitting account deletion requests at https://finats.com/wfp/delete-account in addition to the in-app account deletion feature.

Certain data may be retained after deletion where reasonably necessary for security, fraud prevention, financial recordkeeping, legal compliance, dispute resolution, enforcement of agreements, or the establishment, exercise, or defense of legal claims.

Where data is retained for such purposes, WorkflowPlus will retain it only to the extent reasonably necessary and for the period required or permitted by applicable law.

WorkflowPlus implements reasonable technical and organizational measures designed to protect personal data and service-related information against unauthorized access, disclosure, alteration, loss, misuse, and destruction.

These measures may include account authentication controls, access restrictions, role-based permissions, administrative controls, transport security, monitoring, logging, verification procedures, and other safeguards appropriate to the nature of the platform and the information processed.

Despite reasonable safeguards, no website, application, infrastructure environment, storage system, or transmission method can be guaranteed to be completely secure. As a result, WorkflowPlus cannot guarantee absolute security.

Users are also responsible for helping protect their information by maintaining strong credentials, safeguarding devices, limiting unauthorized access, managing permissions carefully, and notifying WorkflowPlus promptly if they become aware of suspected compromise or misuse.

Where required by applicable law, WorkflowPlus will take appropriate steps to investigate and respond to security incidents, including notifying affected parties or authorities where legally required and reasonably applicable.

Where the General Data Protection Regulation ("GDPR") or similar data protection laws apply, you may have the right, subject to legal limitations and verification requirements, to request access to your personal data, rectification of inaccurate data, erasure of data, restriction of processing, objection to certain processing, and data portability.

You may also have the right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before that withdrawal.

Where WorkflowPlus processes personal data on behalf of a business, team, or organization, certain requests relating to customer-managed content may need to be directed to the relevant organization acting as the data controller, particularly where WorkflowPlus acts only as a processor for that data.

WorkflowPlus may request information necessary to verify your identity and confirm the scope of your request before taking action. We may also decline or limit a request where permitted by law, including where the request is unfounded, excessive, conflicts with legal obligations, or affects the rights of others.

If you believe that your personal data has been handled in a manner that does not comply with applicable law, you may have the right to lodge a complaint with a competent supervisory authority in your jurisdiction.

WorkflowPlus and its service providers may process or store personal data in jurisdictions other than the country in which you are located. As a result, personal data may be transferred across national borders where this is necessary to operate the service, support users, maintain infrastructure, deliver communications, or engage authorized service providers.

Where personal data is transferred internationally and applicable data protection law requires safeguards, WorkflowPlus will seek to rely on appropriate mechanisms, which may include adequacy decisions, contractual protections, or other recognized legal transfer tools, as applicable.

International transfers may arise, for example, where infrastructure, support operations, analytics tools, or service providers involved in email delivery or platform functionality operate from or use systems in other jurisdictions.

By using WorkflowPlus, you acknowledge that such international processing may occur, subject to the safeguards and legal protections required under applicable law.

If you have questions about this Privacy Policy, wish to exercise applicable privacy rights, or need to contact WorkflowPlus regarding personal data, privacy, or data protection matters, you may contact WorkflowPlus at privacy@alma.com.cy.

You may also contact WorkflowPlus for general support at support@alma.com.cy.

When submitting a privacy-related request, please provide enough information for WorkflowPlus to identify your account, organization, or relationship to the relevant data, and to understand the nature of your request.

Where a request relates to data controlled by a business, team, or organization using WorkflowPlus, you may also need to contact that organization directly if it acts as the primary controller of the relevant data.

WorkflowPlus will review privacy-related requests in accordance with applicable law, subject to identity verification, legal limitations, technical feasibility, and the protection of the rights and freedoms of others.