1. Who is responsible
WorkPin is run by VipzLab. For your account details we decide how data is used (we are the “data fiduciary” / controller). For the customer details you add, you decide what to store and why; we process that data only on your instructions to provide the service. This policy is written with India’s Digital Personal Data Protection Act, 2023 and the IT Act, 2000 in mind.
2. What we collect
About you
- Account details: name, email, optional mobile number, optional profile picture, password (stored only as a secure hash).
- Google sign-in: if you continue with Google, we receive your Google account id, name, email address and profile photo. We use them only to sign you in and show your picture; we never get your Google password or access to your Gmail, Drive or contacts.
- Business profile: business name, address, state, GSTIN, UPI ID and logo — if you add them, to print on your invoices.
- Technical data: sign-in time and IP address, browser type, and error logs, to keep the service secure and working.
- Support tickets: messages and screenshots you send us, the page you came from and your device/browser type, so we can help. Only the WorkPin team can read them.
- Push subscription: if you switch on notifications, a technical address from your browser that lets us deliver them.
Data you add about your customers and work
- Customer names, mobile numbers, addresses, emails, remarks and tags.
- Map locations: latitude and longitude you pin. When you tap “Use my location”, your device shares its current position with your browser only for that moment; we save the pin only when you save the customer.
- Photos you take on a job. They are resized and compressed, and metadata such as camera details and GPS tags is removed when we re-encode them.
- Works, notes, stock records, invoices and payments.
3. How we use data
- To provide the service: show your lists, create invoices and PDFs, send reminders and daily summaries you asked for.
- To keep accounts secure, prevent abuse and fix problems.
- To send important service messages (for example password resets, changes to these policies or to pricing).
- To understand overall usage in aggregate (for example how many works are created per day) to improve the product. Our admins see account-level counts, not your customers’ details.
We do not sell your data, use it for advertising, or message your customers.
4. Who we share data with
Only service providers that help us run WorkPin, under confidentiality:
- Hosting: our servers (Hostinger VPS, data stored in a secure data centre).
- Email delivery: to send account emails and invoices you choose to email.
- Push services: your browser’s push service (for example Google or Apple) delivers notifications; they see only the encrypted message.
- Map tiles: map images are loaded from OpenStreetMap and Esri. They receive normal web requests (your IP and the map area viewed), not your customer data. Address search uses OpenStreetMap Nominatim only when you press search.
We may disclose data if required by law or to protect rights and safety, and will tell you where allowed.
5. Sharing invoices
When you share an invoice, we create a private link with a long random code. Anyone with the link can open that one invoice PDF. Cancelling the invoice disables the link.
6. How long we keep data
- Your data is kept while your account is active.
- When you delete your account, your data and photos are deleted from our live systems immediately and from backups within 30 days.
- Read notifications are cleared after 60 days. Security logs are kept for up to 12 months.
7. Security
We use HTTPS everywhere, hashed passwords, optional two-factor sign-in, private storage for photos, and strict per-account separation of data. No system is perfectly secure, so please use a strong password and keep your devices locked.
8. Your rights
You can access, correct and export your data from inside the app, and delete your account any time. You may also ask us for information about how your data is processed, or raise a grievance, by writing to vipzlab@gmail.com. We aim to respond within 30 days.
If one of your customers asks you to delete their details, you can delete them from your customer list.
9. Children
WorkPin is for businesses and is not meant for anyone under 18.
10. Cookies
We use only essential cookies to keep you signed in and protect forms. See the Cookie Policy.
11. Changes
We will post updates on this page and notify you in the app or by email about important changes.
12. Contact / Grievance officer
VipzLab · vipzlab@gmail.com