Privacy Policy

Last updated: 4 June 2026

1. Overview

This policy explains how WrkGenie collects, uses, stores, and protects personal data when you visit wrkgenie.com or contact us. We aim to be clear and honest about what we do with your information, and we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are (Data Controller)

The data controller for this website is Autchara Norris, a sole trader operating as WrkGenie in the United Kingdom.

  • Email: hello@wrkgenie.com
  • Postal address: Bon Amie, Binhamy Road, Stratton, Cornwall, EX23 9AA, United Kingdom.

3. Data we collect

a) Contact form data

When you submit our contact form we collect your name, email address, and the contents of your message. This is used solely to respond to your enquiry.

b) Analytics data

With your consent, we use analytics tools to understand how visitors interact with the site (pages viewed, session duration, approximate location, device and browser type). We do not use this information to identify you personally.

c) Technical data

Our infrastructure provider (Cloudflare) processes basic technical information needed to deliver the site and protect it from abuse, including IP address, browser type, request headers, and timestamps.

d) Visit notifications

We may receive a notification when our website is visited, including approximate location (city/country), browser type, and a hashed identifier derived from your IP and browser. We do not store raw IP addresses for this purpose, do not set cookies, and do not use this information to track you across other sites.

4. Lawful bases for processing

We rely on the following lawful bases under Article 6 of the UK GDPR:

  • Consent — for optional analytics and non-essential cookies. You can withdraw consent at any time via the cookie banner.
  • Legitimate interests — for operating, securing, and improving the website (including spam and abuse prevention).
  • Pre-contract / enquiry handling — for responding to messages you send via our contact form.

5. Third-party processors

We use a small number of trusted providers to operate the site. These providers act as data processors on our behalf:

  • Google (Google Analytics 4) — website analytics. Loaded only with your consent.
  • Microsoft (Clarity) — anonymised behavioural analytics and session insights. Loaded only with your consent.
  • Cloudflare — content delivery, security, and Turnstile (anti-bot challenge on forms).
  • Stripe, Inc. — payment processing. Stripe processes card transactions on our behalf, including handling billing information such as name, billing address, and payment method details. WrkGenie (Autchara Norris trading as WrkGenie) is the seller; Stripe does not act as Merchant of Record. You can view Stripe's Privacy Policy on their website.
  • Meta Platforms, Inc. (WhatsApp Business Platform) — messaging infrastructure used to deliver the WrkGenie WhatsApp assistant and to facilitate business communications between tenants and their customers via WhatsApp. Message content and metadata are processed by Meta in accordance with their policies. You can view Meta's Privacy Policy on their website.
  • OpenAI, L.L.C. — artificial intelligence services used to power the WrkGenie assistant features, including WhatsApp intent classification and the knowledge assistant. Message content submitted through these features may be processed by OpenAI solely to provide the requested functionality. You can view OpenAI's Privacy Policy on their website.
  • Paddle.com Market Limited — used for subscription billing and payments in certain markets. Paddle may act as Merchant of Record for applicable transactions. You can view Paddle's Privacy Policy on their website.
  • Wasabi Technologies, Inc. — cloud object storage used for storing files and assets associated with your WrkGenie account, such as uploaded documents and media.

We do not sell, rent, or share your personal data for marketing purposes.

6. International transfers

Some of our processors (notably Google, Microsoft, Cloudflare, Stripe, Meta, OpenAI, Paddle, and Wasabi) may process data outside the United Kingdom and European Economic Area. Where this happens, transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision recognised by the UK government.

7. App data (app.wrkgenie.com)

When you create a WrkGenie account and use the app at app.wrkgenie.com, we act as a data controller for your account data and as a data processor for the business data you enter (jobs, invoices, quotes, customer records, and related content) on behalf of your business.

The personal data we hold in relation to your app account includes:

  • Account data: name, email address, business name, and login credentials.
  • Subscription data: plan type, billing status, and transaction references (processed by Stripe on our behalf — we do not store full payment card details).
  • Business records: jobs, invoices, quotes, customer names, contact details, and any notes you enter. This data belongs to you.
  • Session data: a secure authentication cookie to keep you logged in.
  • Activity logs: an append-only audit trail of key actions within your account for security and debugging purposes.

App data retention: account and business records are retained for as long as your subscription is active. If you cancel, we retain your data for a short backup window (up to 30 days) before permanent deletion, unless you request earlier deletion or we are required by law to keep it longer.

You can export your business data at any time from within the app. To request deletion of your account and all associated data, email hello@wrkgenie.com.

8. Data retention

  • Contact form messages: kept for up to 12 months after the enquiry is resolved, then deleted unless we need them for legal or accounting reasons.
  • Analytics data: retained according to the provider's default settings (Google Analytics 4 is configured for a maximum of 14 months).
  • Security and access logs: retained for a short period (typically up to 30 days) for troubleshooting and abuse prevention.

9. Cookies

We use a small number of cookies and similar technologies:

  • Essential cookies — required for the site to function and to remember your cookie preferences. These do not require consent.
  • Analytics cookies — set by Google Analytics and Microsoft Clarity only after you give consent via our cookie banner.
  • Security cookies — set by Cloudflare to protect the site against malicious traffic.

You can change or withdraw your consent at any time using the cookie banner, or by clearing cookies and site data in your browser.

10. Your rights

Under UK GDPR you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your personal data where there is no overriding reason to keep it.
  • Restriction — ask us to limit how we use your data.
  • Objection — object to processing based on legitimate interests.
  • Data portability — request your data in a structured, machine-readable format.
  • Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, email hello@wrkgenie.com. We will respond within one month.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.

11. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include encrypted connections (HTTPS), access controls, hardened infrastructure, and regular review of our third-party providers. No system can be guaranteed 100% secure, but we work to minimise risk.

12. Children

WrkGenie is intended for use by businesses and adults. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. WhatsApp Business Platform

WrkGenie uses the Meta WhatsApp Business Platform to provide an AI-powered assistant feature and to enable businesses (“tenants”) using WrkGenie to communicate with their customers via WhatsApp.

When WhatsApp features are used, the following data may be processed:

  • Inbound message content: the text of messages sent to a WrkGenie-connected WhatsApp number, processed to determine intent and generate a response.
  • Sender phone number: used to identify the account owner or customer and route the message to the correct business tenant.
  • Message metadata: timestamps, message identifiers (wamid), and delivery status, retained in our event log for deduplication, auditing, and support.
  • Message logs: inbound and outbound WhatsApp messages may be stored for a limited period for support, troubleshooting, and audit purposes.

WhatsApp message data is processed in accordance with Meta's Privacy Policy as well as this policy. WrkGenie acts as a Solution Provider (ISV) managing WhatsApp Business accounts on behalf of its tenants.

14. AI assistant features

WrkGenie uses OpenAI services to power certain features, including the WhatsApp assistant and in-app AI tools. When you use these features, relevant message content or queries may be transmitted to OpenAI for processing.

  • Data is sent to OpenAI solely for the purpose of generating a response to your request.
  • We do not send personally identifiable information to OpenAI beyond what is necessary to fulfil the request (for example, a business name or invoice amount included in a command).
  • Tenant identifiers are not included in AI prompts.
  • OpenAI processes data in accordance with their Privacy Policy. OpenAI's API does not use customer data submitted via the API to train their models by default.

AI-generated responses are informational. You remain responsible for reviewing and verifying any invoices, quotes, or business records generated or suggested by AI features.

15. Customer communications on behalf of tenants

WrkGenie is a multi-tenant SaaS platform. Businesses (“tenants”) use WrkGenie to manage their operations and interact with their own customers. In this context:

  • WrkGenie acts as a data processor on behalf of each tenant when processing their customers' personal data.
  • Each tenant is the data controller for the personal data of their own customers.
  • WrkGenie may send emails, invoices, quotations, appointment notifications, and other business communications on behalf of tenants to their customers.
  • WhatsApp messages may be sent on behalf of tenants to their customers via the WrkGenie-integrated WhatsApp Business number.
  • Customer data entered into WrkGenie by a tenant (such as names, email addresses, phone numbers, and job details) is processed by WrkGenie solely to provide the platform services to that tenant.

If you are a customer of a business that uses WrkGenie and you have questions about how your data is used, please contact that business directly. You may also contact us at hello@wrkgenie.com if you believe your data has been processed incorrectly.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our service, our processors, or the law. When we make material changes we will update the “Last updated” date at the top of this page and, where appropriate, notify you through the website.

17. Contact

Questions about this policy or how we handle your data? Email hello@wrkgenie.com.