WorkMade Privacy Policy

We collect the following categories of personal information:

• Identifiers and contact data: name, email address, phone number, postal address, and account login information.
• Sensitive personal information: Social Security number (SSN), employer identification number (EIN), date of birth, financial-account information, and detailed tax information. We collect this only as needed to provide the Service and, where required, with your consent.
• Financial and transaction data: information from financial accounts you connect, including account and routing details, balances, and transaction history, obtained through third-party account-aggregation providers you authorize.
• Tax information: income, expenses, deductions, filing status, household and dependent information, and documents you upload such as W-2 and 1099 forms.
• Voice recordings and transcripts: if you use our optional AI voice assistant, audio recordings of your sessions and AI-generated transcripts.
• Device and usage data: IP address, device and browser information, app interactions, and similar data collected automatically, including through cookies and similar technologies (see Section 11).
• Inferences: estimates and categorizations we derive from the above to provide the Service.
• Identity-verification documents: documents or images you provide or capture (for example, government-issued identification) to verify your identity, where our money-services partners require it.
• Precise geolocation: collected only if you use a feature that requires it (such as in-person payments in our mobile app) and only with your device permission.
• Device identifiers and fraud-prevention signals: device and network identifiers and similar signals that we and our fraud-prevention providers use to verify your identity and detect and prevent fraud.
• Mobile app permissions: with your permission, push-notification tokens and access to your device camera, photos, or microphone, used to capture documents and to provide voice features.
• Information about other people you provide: when you create invoices, add clients or payers, or report contractors, we collect the names and contact and payment details you provide about those third parties. You are responsible for having the right to share that information with us.

We collect information directly from you; automatically from your use of the Service; from financial accounts you connect (through third-party account-aggregation providers, with your authorization); from documents you upload; and from service providers that help us operate, secure, and support the Service.

We use personal information to: provide, maintain, and secure the Service; connect your financial accounts and categorize transactions; estimate potential taxes and generate draft forms and worksheets; operate the tax-reserve feature and process transfers you authorize; provide customer support; detect, prevent, and investigate fraud and abuse; comply with legal, tax, and regulatory obligations; communicate with you about your account and the Service; and, where permitted, send you marketing you can opt out of at any time.

We use your information consistent with the purposes for which you provided it. We do not use your tax-return information for purposes beyond preparing your estimates and providing the Service unless you give us separate consent where the law requires it (see Section 10).

We use AI and automated processing to categorize transactions, parse documents you upload, generate suggestions, and produce tax estimates. These automated processes assist you; they do not make final decisions about you on their own, and we design the Service so that you review and confirm outputs.

Where automated processing is used in ways that may significantly affect you, you have the right to request information about how it works, to request human review, and, where applicable law provides, to opt out. To make such a request, contact us at legal@workmade.com. We are also preparing for additional automated-decision-making and profiling rights taking effect under California and Colorado law in 2027, and we honor the right to opt out of profiling for decisions with legal or similarly significant effects where applicable law provides it.

If you choose to use our AI voice assistant, we record and transcribe your session to collect and organize the information you provide and to create a record you can review. We tell you before recording and obtain your consent; you can choose to provide your information another way. In states that require all parties to consent to a recording, we obtain your consent before recording begins.

We use your voice recordings only to operate and improve the voice feature; we transcribe your speech to text and do not create voiceprints or other biometric identifiers used to identify you, and we will not sell your voice data. We retain voice recordings only as long as needed for these purposes and then delete them; transcripts are kept as part of your account record. You may request deletion of your voice recordings by contacting legal@workmade.com.

We may use de-identified or aggregated information that does not reasonably identify you to develop and improve our models and the Service. We do not use your identifiable financial information, tax-return information, or voice recordings to train AI models without your separate, affirmative consent. We will not retroactively apply new, materially different uses to information we already collected without obtaining your consent where the law requires it.

We share personal information only as needed and only with the following categories of recipients:

• Service providers and processors that operate the Service under contract, including payment processors; account-aggregation providers; money-services providers and their partner financial institutions; cloud-hosting and infrastructure providers; AI and machine-learning providers; analytics providers; and customer-support tools.
• Professional advisors such as auditors, accountants, and lawyers.
• Legal, regulatory, and safety recipients, where we believe disclosure is required by law or legal process, to enforce our agreements, or to protect the rights, property, or safety of you, us, or others.
• In a business transfer, such as a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy.

We do not sell your personal information for money or other valuable consideration, and we do not share it for cross-context behavioral advertising. We honor browser-based opt-out signals, including the Global Privacy Control (GPC), where required by law.

As a financial institution under the GLBA, we collect nonpublic personal information about you, including the identifiers, financial-account data, transaction data, SSN/EIN, and tax information described above. We disclose this information only as described in this Privacy Policy and as permitted by law — for example, to the service providers that help us deliver the Service, to comply with legal obligations, and at your direction. We do not sell this information, and we do not disclose it to nonaffiliated third parties except as permitted by the GLBA. We maintain a written information-security program with administrative, technical, and physical safeguards designed to protect this information, consistent with the FTC Safeguards Rule.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of sensitive data and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we experience a data breach affecting your information, we will notify you and regulators as required by law.

We retain personal information for as long as needed to provide the Service and for legitimate business and legal purposes, including tax and financial record-keeping, fraud prevention, dispute resolution, and enforcing our agreements. Retention periods vary by data type and applicable law; for example, we retain records of certain consents and authorizations for the periods the law requires.

We use the tax-related information you provide to prepare your estimates and provide the Service. Federal law (Internal Revenue Code section 7216) restricts how a provider may use or disclose tax-return information. We will not use or disclose your tax-return information for purposes other than providing the Service unless you give us a separate, signed consent in the form the law requires. Where applicable, we will request that consent in the product. See our Consent to Use and Disclose Tax Return Information.

We and our analytics providers use cookies and similar technologies to operate the Service, remember your preferences, measure performance, and understand how the Service is used, including attribution data such as advertising click identifiers. You can control cookies through your browser and, where offered, our cookie controls. For details, see our Cookie Policy.

Depending on where you live, you may have some or all of the following rights regarding your personal information: to know and access the information we hold about you and how we use and share it; to correct inaccurate information; to delete information; to obtain a portable copy; to opt out of any sale or sharing for targeted advertising (we do neither); to limit the use of sensitive personal information; to opt out of certain profiling; and to not be discriminated against for exercising your rights.

To exercise your rights, contact us at legal@workmade.com or through the request channel we provide. We will verify your request and respond within the time the law requires (generally 45 days, with an extension where permitted). You may use an authorized agent to submit a request on your behalf, subject to verification. If we decline your request, you may appeal by replying to our response; if you remain unsatisfied, you may contact your state attorney general.

The Service is intended only for individuals 18 and older. We do not knowingly collect personal information from children under 13, and the Service is not directed to them. If we learn we have collected information from a child under 13, we will delete it. If you believe a child has provided us information, contact us at legal@workmade.com.

The Service is operated in the United States, and your information is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your location.

We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date and, for material changes, provide additional notice as required by law. If we wish to use information we already collected for a materially different purpose, we will obtain your consent where the law requires it.

Questions or requests? Contact us at legal@workmade.com or WorkMade Technologies, Inc., 2261 Market Street, Suite 85249, San Francisco, CA 94114.