Privacy Notice
Last updated: 16 July 2026
1. Who we are
This Privacy Notice explains how Mr Wambi, trading as WorkPulse (“WorkPulse”, “we”, “us”, “our”) collects and uses personal data when you use the WorkPulse platform (the “Service”).
2. Our role
For personal data about visitors to our website and administrators who register a company workspace, Mr Wambi acts as the data controller. For personal data that a customer company uploads or generates inside their own WorkPulse workspace about their employees, we act as a data processor on that company’s behalf.
3. Personal data we collect
- Account data — name, work email, hashed password, company name, industry, role.
- Workspace data — content you and your team create in WorkPulse: employee records, tasks, attendance entries, leave requests, announcements, events, files, and comments.
- Support data — messages, attachments, and metadata you send to our support channels.
- Usage and telemetry — pages viewed, actions taken, feature usage, device type, browser, operating system, and approximate location derived from IP.
- Device identifiers and IP address — used for security, fraud prevention, and rate limiting.
- AI prompts and outputs — if you use AI features, the prompts you submit and outputs generated for you.
Payment-related personal data (card details, billing address, tax identifiers) is collected directly by our reseller Paddle and is not stored on our systems. See Paddle’s Privacy Notice for details.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create and manage your account and workspace | Performance of a contract |
| Provide the Service, including hosting your workspace data | Performance of a contract |
| Customer support | Performance of a contract; legitimate interests |
| Security, fraud prevention, and abuse detection | Legitimate interests; legal obligation |
| Product analytics and improvement | Legitimate interests |
| Service and transactional communications | Performance of a contract |
| Marketing communications (where permitted) | Consent; legitimate interests |
| Compliance with legal obligations | Legal obligation |
5. Who we share personal data with
- Service providers and subprocessors — cloud hosting, database, email delivery, error monitoring, and analytics providers that help us operate the Service.
- Paddle — our Merchant of Record for all paid subscriptions. Paddle handles checkout, billing, subscription management, payments, invoicing, tax calculation and remittance, and refund processing.
- Your company workspace — data you create in a workspace is shared with the administrators and members of that workspace according to their roles and permissions.
- Professional advisers — legal, accounting, and audit advisers, under duties of confidentiality.
- Authorities — where required by law, regulation, court order, or to protect our rights, users, or the public.
- Successors — a party acquiring our business or assets, subject to confidentiality obligations.
We do not sell personal data.
6. International transfers
Our providers may process personal data outside your country, including in the United States. Where personal data is transferred from the UK or EEA to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.
7. Retention
We keep personal data for as long as we need it for the purposes described in this notice. Account and workspace data is kept for the life of your account and for a reasonable period after termination so you can reactivate or export it, after which we delete or anonymise it. Support records, security logs, and records we must keep for legal or tax reasons are kept for the period required by law.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data;
- request restriction of processing;
- request portability of data you provided to us;
- object to processing based on legitimate interests or direct marketing;
- withdraw consent at any time where processing is based on consent; and
- lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, email us at officialworkpulse@gmail.com. We aim to respond within one month.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, per-company database isolation with row-level security, and monitoring. No system is completely secure, and we cannot guarantee absolute security.
10. Cookies
We use a small number of essential cookies to keep you signed in and to remember your preferences, and limited analytics cookies to understand how the Service is used. Essential cookies do not require consent. You can manage cookies through your browser settings; disabling essential cookies may prevent the Service from working properly.
11. Children
WorkPulse is a workplace product and is not directed to children under 16. We do not knowingly collect personal data from children.
12. Changes to this notice
We may update this notice from time to time. If we make material changes, we will notify you through the Service or by email.
13. Contact
Mr Wambi (trading as WorkPulse)
officialworkpulse@gmail.com
See also: Terms & Conditions · Refund Policy