WorkAffina – Privacy Policy

Last updated: December 2025

WorkAffina Ltd (“WorkAffina”, “we”, “us”, “our”) is committed to protecting the privacy of individuals whose personal data we process. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, create an account, interact with us, or use the WorkAffina platform.

By accessing or using WorkAffina, you agree to the terms of this Privacy Policy.
If you do not agree, you should discontinue use of the platform.

1. Who We Are

WorkAffina Ltd is a company registered in England & Wales. We provide an AI-assisted screening workspace that helps recruiters and hiring teams extract information from CVs, organise candidate data, and streamline early-stage recruitment workflows.

We act as a Data Controller for personal data relating to website visitors, account creation, billing, and support interactions.
We act as a Data Processor when customers upload candidate data into the WorkAffina platform, as described in our Data Processing Agreement (DPA).

For any questions, contact us at support@workaffina.com.

2. Personal Data We Collect

We collect several categories of personal data, depending on how you use our website and platform.

2.1 Information You Provide Directly

Account and Organisation Information
When you create an account, we collect your name, email address, organisation details, job role, and billing information (processed securely by our payment provider).

Candidate and Recruitment Information Provided by Customers
Customers may upload personal data about job applicants, including CVs, résumés, contact details, employment history, education, skills, and recruiter notes.
Customers are responsible for ensuring they have lawful authority to upload candidate data.

Communications
If you contact us for support, we may retain your message, attachments, and contact details.

2.2 Information Collected Automatically

Technical and Usage Information
When using the platform or visiting our website, we collect information such as IP address, browser type, device information, pages visited, features used, time spent, and error logs.
This helps us improve reliability, performance, and security.

Cookies and Similar Technologies
We use essential cookies for authentication and platform functionality. Analytics cookies may be used with consent where legally required.

3. How We Use Personal Data

We process personal data for the following purposes:

3.1 Platform Operation
To provide and operate the WorkAffina platform, extract and structure information from CVs, generate factual summaries when requested, support filtering and shortlisting features, and maintain platform performance.

3.2 Platform Improvement
To diagnose issues, optimise features, enhance security, and improve user experience.
We do not use candidate data to train internal AI models.

3.3 Communication
To send service notifications, onboarding guidance, billing updates, and support responses.

3.4 Legal Compliance
To meet tax, regulatory, and security obligations.

3.5 Platform Security
To detect suspicious activity, prevent misuse, and enforce our Terms & Conditions.

4. Legal Bases for Processing

Under UK GDPR and EU GDPR, we process personal data based on the following legal bases:

  • Contractual necessity: To provide the platform to customers.
  • Legitimate interests: To improve the platform, prevent abuse, and ensure security.
  • Legal obligations: To comply with applicable laws.
  • Consent: When required for analytics or non-essential cookies.

Customers are responsible for determining the lawful basis for uploading candidate data.

5. How We Share Personal Data

We share data only with trusted third-party service providers who help operate the WorkAffina platform:

Hosting & Infrastructure Providers
Supabase, AWS, and Google Cloud.

AI Processing Providers
OpenAI and Anthropic (used solely to process text provided by customers — not used for model training).

Email Delivery Providers
Resend.

Analytics Providers
Privacy-focused tools, if enabled.

All third parties are required to meet GDPR standards and may only process data as instructed by WorkAffina.
We do not sell or rent personal data.

6. International Data Transfers

Some service providers may operate outside the UK or EEA. When personal data is transferred internationally, we ensure appropriate safeguards such as Standard Contractual Clauses (SCCs), adequacy decisions, or supplementary technical measures.

7. Data Retention

We retain personal data only as long as necessary:

  • Account data is retained while your account remains active.
  • Candidate data is stored only while the customer maintains an active subscription or as their plan configures.
  • Usage logs are retained temporarily for security and operational purposes.
  • Support messages may be retained for service quality and compliance.

Upon account closure, we delete or anonymise data unless retention is required by law.

8. Security

We implement technical and organisational safeguards to protect personal data, including encryption, role-based access controls, secure infrastructure, logging, monitoring, and periodic reviews.
While no system is entirely risk-free, we take reasonable steps to protect the information we process.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • access your personal data,
  • correct inaccurate information,
  • request deletion,
  • object to processing,
  • restrict processing,
  • request data portability.

If your request relates to candidate data uploaded by a customer, we may refer you to the customer (the Data Controller).
Requests can be submitted to support@workaffina.com.

10. Children’s Data

WorkAffina is intended for professional use by individuals aged 18 and over.
We do not knowingly collect personal data from children.

11. Third-Party Links

Our website may contain links to third-party websites or services.
We are not responsible for their privacy practices or content.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If material changes occur, we will notify you via email or through the platform.
The most current version will always be available at workaffina.com/privacy.

13. Contact Us

For questions, concerns, or privacy-related requests:

WorkAffina Ltd
Email: support@workaffina.com
Website: workaffina.com