Legal

Privacy Policy

Last updated: June 2026

1. What We Collect

When you create an HQ Workforce account we collect:

  • Your name, email address, and company name
  • Billing information processed securely via Stripe — we never store full card numbers
  • Usage data (page visits, feature usage) to improve the platform

When your workers or candidates use your WordPress-connected site we may collect:

  • Worker profile data submitted through onboarding forms (name, contact, employment history)
  • Training completion records, certification data, and activity logs
  • Application data submitted through job posting forms

2. How We Use Your Data

We use collected data solely to:

  • Provide, operate, and improve the HQ Workforce platform
  • Process billing and send subscription-related communications
  • Send product updates and security notices (you may opt out of marketing emails)
  • Comply with applicable laws and regulations

We do not sell your data or your workers' data to third parties. We do not use workforce data for advertising.

3. WordPress Plugin Data

The HQ Workforce WordPress plugin transmits data between your WordPress site and the HQ Workforce platform using your API key. Data transmitted includes:

  • Worker onboarding form submissions
  • Job application form submissions
  • Activity reports from supervisor portal

All plugin-to-API communication is encrypted in transit via TLS. API keys are scoped per website and can be revoked at any time from your dashboard.

4. Data Retention

We retain your account data for as long as your subscription is active. Upon subscription cancellation:

  • Account and configuration data is retained for 30 days in case of reactivation
  • After 30 days, data is permanently deleted from our systems
  • You may request immediate deletion by contacting support

Audit logs are retained for 12 months for compliance purposes.

5. Data Security

All data is encrypted in transit (TLS 1.2+) and at rest. Access to production data is restricted to authorized personnel and logged via audit trail. We use Stripe for all payment processing — card data never touches our servers.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time. Contact us at the address below. EU/UK users have additional rights under GDPR/UK GDPR.

7. Contact

For privacy inquiries, contact us at: support@hqworkforce.com