# Privacy Policy for WorkBridge

**Last Updated:** May 26, 2026

**Effective Date:** May 26, 2026

**App Version:** 1.2.14

---

## 1. Introduction and Overview

Welcome to **WorkBridge** ("we," "our," "us," or the "Company"). WorkBridge is a multi-service platform that connects customers with independent service providers (workers and firms) across 40+ service categories including home services, beauty and wellness, transportation, property rentals and sales, events, construction, interior design, filtered water supply, waste management, travel agencies, rental cars, and more (collectively, the "Platform" or "Services").

This Privacy Policy is a legally binding document that explains in detail:

- What personal information we collect from you

- Why we collect it

- How we use it

- Who we share it with

- How long we keep it

- Your rights over your data

- How to delete your account or specific data

- How we protect your information

**Please read this Privacy Policy carefully before using WorkBridge.** By downloading, registering, or using the app, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Service.

If you do not agree with any part of this Privacy Policy, you must immediately stop using the Services and delete your account.

---

## 2. Who This Policy Applies To

This Privacy Policy applies to all users of the WorkBridge mobile application and any related web interfaces, including:

- **Customers** – individuals who use the platform to find and book services

- **Workers (Service Providers)** – individual freelancers or professionals offering services

- **Firms / Businesses** – registered companies or organizations offering services under a business name

- **Visitors** – anyone who browses the app without a registered account

---

## 3. Information We Collect

### 3.1 Information You Provide During Registration

#### All Users (Customers, Workers, and Firms):

| Data Type | Purpose |

|-----------|---------|

| Full name | Account identification and display |

| Email address | Login, account verification, and communication |

| Phone number | Login via OTP, contact, and service coordination |

| Password | Account authentication (stored encrypted — never plain text) |

| Profile picture | Identification and profile display (stored on Cloudinary) |

| City / Location | Showing relevant service providers and listings |

#### Additional Data Collected from Workers:

| Data Type | Purpose |

|-----------|---------|

| Service category and work type | Matching workers with customers |

| Skills and experience | Profile credibility and matching |

| Certifications *(optional)* | Workers may voluntarily add certifications to strengthen their profile — not required |

| Portfolio images and project descriptions | Showcasing past work to customers |

| Pricing and service area | Search results and booking |

| National ID / CNIC *(security-sensitive services only)* | Required only for workers whose service involves entering homes, handling valuables, or working in security-sensitive contexts — **retained for the full lifetime of the account** |

| Background image (header photo) | Worker profile customization |

| Biometric data references | Biometric login — **stored only on your device, never transmitted to our servers** |

> **CNIC Notice:** CNIC/National ID verification is **not collected from all workers**. It is required only where the nature of the service creates a genuine security or safety need (e.g., home cleaning, plumbing, electrical work, caregiving, locksmith services). It is collected purely for the protection and safety of our customers. **Customers and Firms are never required to provide a CNIC.**

#### Additional Data Collected from Firms / Businesses:

| Data Type | Purpose |

|-----------|---------|

| Business / firm name | Profile display and search |

| Business registration details | Verification |

| Service offerings and pricing | Search and booking |

| Certifications *(optional)* | Firms may voluntarily add certifications or accreditations to their profile — not required |

| Portfolio and project images | Profile credibility (stored on Cloudinary) |

| Background / header image | Firm profile customization |

#### Financial Information (for Sponsored Plans):

- Payment method selection (JazzCash, EasyPaisa, Bank Transfer, or other)

- Sponsorship plan title, price, start date, expiry date, status

- Transaction timestamps

> **Important Note:** WorkBridge does not directly process card payments or store complete payment card numbers or bank account numbers. Payment transactions are processed through third-party certified payment gateways (JazzCash, EasyPaisa) or directly via bank transfer outside the app. We only record payment method type, amount, and transaction status.

---

### 3.2 Information Collected When You Use the App

#### Location Data:

- **Real-time GPS location** – used when you search for nearby workers, book a service, or request rental cars (foreground only)

- **City and address** – used to filter relevant service providers and property listings

- **Delivery/service address** – stored per booking for service coordination

#### Communication Data (Chat Feature):

- **Text messages** between customers and service providers — stored on Firebase Firestore

- **Voice/audio messages** — uploaded to Cloudinary servers

- **Images** shared in conversations — uploaded to Cloudinary servers

- **Message timestamps** and read receipts

#### Booking and Service Data:

- Job request details (service type, description, location, timing)

- Booking status and history (accepted, rejected, completed)

- Rental car booking details (car model, booking dates, contact info)

- Property listing inquiries and rental/sale requests

- Beauty salon, event, construction, and other service bookings

#### Device and Technical Data:

- Device type, model, and manufacturer

- Operating system and version

- Unique device identifiers (device ID)

- Firebase Cloud Messaging (FCM) token (for push notifications)

- App version and IP address

- **Crash logs and error reports** — automatically collected via Firebase to help us fix bugs and improve stability

- **App performance data** — screen load times, response times, and network request performance (via Firebase Performance Monitoring)

#### Usage Data:

- Features accessed within the app

- Screens viewed and time spent

- Search queries and notification interactions

- **Last active timestamp** — updated every 2 minutes while using the app (shows online/active status to other users)

#### Media Permissions:

- **Camera** – for taking profile pictures, portfolio images, and chat images

- **Gallery/Storage** – for uploading images

- **Microphone** – for recording and sending voice messages in chat

---

### 3.3 Information from Third-Party Login (Google Sign-In)

When you sign in using **Google Sign-In**, we receive:

- Your Google display name, email address, and profile picture URL

We do not receive your Google password. Google Sign-In is governed by Google's own Privacy Policy.

---

### 3.4 Biometric Authentication Data

WorkBridge offers fingerprint and Face ID login as a convenience feature. When you enable biometrics:

- Your biometric data is **processed entirely on your device** using the device's secure hardware

- **We never receive, transmit, or store your actual biometric data** on our servers

- We only store an encrypted credential reference in your device's local storage (SharedPreferences)

- Disabling biometrics from the app settings removes all local credential references

---

### 3.5 Sponsorship and Promotion Data

For workers who subscribe to the "Sponsor Yourself" / "Promote Yourself" feature:

- Selected sponsorship plan title, price, payment method

- Subscription start and expiry date, status (active/expired/cancelled)

- Auto-renew preferences

---

## 4. How We Use Your Information

### 4.1 To Provide and Operate the Services

- Create, maintain, and manage your account

- Authenticate your identity at login (biometric, OTP, email/password, Google)

- Match customers with available service providers based on location and category

- Process and manage job/service bookings

- Enable real-time in-app chat between users (text, voice, images)

- Display property listings, rental cars, and service firm profiles

- Send booking confirmations and status updates

- Process and track sponsorship subscriptions for workers

- Enable in-app wallet and transaction tracking

### 4.2 To Communicate with You

- Send push notifications for new job requests, booking updates, messages, and payment confirmations

- Respond to support requests

- Marketing communications (only with your consent — opt-out available anytime)

### 4.3 To Improve Our Services

- Analyze app usage, identify and fix bugs

- Collect crash reports and performance metrics (via Firebase Crashlytics and Firebase Performance Monitoring) to maintain app stability

- Develop new features and optimize search/matching algorithms

- All analytics data is anonymised and never linked to your personal identity

### 4.4 For Safety and Trust

- Verify the identity of service providers via CNIC/ID verification

- Prevent fraud, abuse, and policy violations

- Enforce our Terms of Service and resolve disputes

### 4.5 For Legal and Compliance Purposes

- Comply with applicable Pakistani laws and regulations

- Respond to lawful requests from government or judicial authorities

- Maintain financial records for legal/tax compliance

---

## 5. How We Share Your Information

**We do not sell, rent, or trade your personal information to any third party for commercial purposes.**

### 5.1 Between Users (Necessary for Service Delivery)

- When you book a service: your name, contact info, service address, and booking details are shared with the service provider

- Worker/firm profiles (name, photo, background image, skills, portfolio, ratings, pricing) are publicly visible within the app

### 5.2 With Trusted Third-Party Service Providers

| Provider | Data Shared | Purpose |

|----------|------------|---------|

| **Firebase (Google)** | All app data | Database, authentication, storage, messaging, crash reporting, performance monitoring |

| **Firebase Crashlytics** | Crash logs, device state, app version | Crash reporting and stability monitoring (anonymised) |

| **Firebase Performance Monitoring** | Screen load times, network response times | App performance improvement (anonymised) |

| **Cloudinary** | Images, voice messages | Media storage and CDN delivery |

| **Google Maps API** | Location coordinates | Map display and location-based search |

| **JazzCash** | Payment amount and method | Payment processing for sponsored plans |

| **EasyPaisa** | Payment amount and method | Payment processing for sponsored plans |

| **Bank Transfer** | Payment amount and method | Direct bank-based payment for sponsored plans |

| **Google Sign-In** | Email, name, avatar | Third-party authentication |

| **Firebase Cloud Messaging (FCM)** | Device token, notification content | Push notifications |

All third-party providers are contractually bound to protect your data and use it only for the stated purpose.

### 5.3 For Legal Requirements

Disclosed when required by law, court order, or to protect the safety of users or the public.

### 5.4 Business Transfers

In case of merger or acquisition, with advance notice to users.

### 5.5 With Your Explicit Consent

For any sharing not described above, we will request your explicit consent first.

---

## 6. Data Storage and Security

### 6.1 Where Your Data Is Stored

- **Firebase Firestore (Google Cloud)** — primary app database

- **Cloudinary CDN** — images and voice messages (global servers)

- **Firebase Authentication (Google Cloud)** — login credentials

- **Your device only** — biometric credential references (SharedPreferences); never transmitted to our servers

### 6.2 Security Measures

- **TLS/SSL Encryption** — all data in transit is encrypted

- **Firebase Security Rules** — strict rules; users access only their own data

- **Password Hashing** — passwords never stored in plain text

- **Cloudinary Signed Requests** — media deletions require cryptographic verification

- **Biometric data stays entirely on your device** — never transmitted

- **Re-authentication required before account deletion**

- Limited staff access to user data with regular security reviews

### 6.3 Your Security Responsibilities

- Use a strong, unique password

- Enable biometric authentication

- Log out from shared or public devices

- Report unauthorized access to workbridgesupport@gmail.com

> **Disclaimer:** No security system is 100% impenetrable. In the unlikely event of a data breach, we will notify affected users as required by applicable law.

---

## 7. Data Retention Policy

| Data Type | Retention Period |

|-----------|-----------------|

| Account profile data | While account is active |

| Booking and job request history | 7 years (legal/tax compliance) |

| Chat messages (text) | 1 year from last activity |

| Voice messages and chat images | 1 year from upload date |

| Location history | 90 days |

| Push notification records | 90 days |

| User activity timestamps | 90 days |

| Sponsorship/subscription records | 7 years (financial compliance) |

| Support tickets | 3 years after resolution |

| Rewards / coins balance and history | While account is active; deleted on account deletion |

| **CNIC/Verification documents** *(security-sensitive workers only)* | **Lifetime of the account** |

| Anonymised review data | Indefinitely (after account deletion) |

| **Deleted accounts** | Personal data purged within 30 days |

---

## 8. Your Rights — Delete Your Entire Account

You have the right to permanently delete your WorkBridge account and all associated data.

**How to Delete Your Account (In-App):**

> Profile → Settings → Account Settings → Delete Account → Enter Password → Confirm

**Account Deletion URL (Google Play Console):** 

`https://play.google.com/store/apps/details?id=com.workbridge.nexora` 

Then open the app → Profile → Settings → Account Settings → Delete Account

**What Happens When You Delete Your Account:**

1. Profile immediately deactivated and hidden from all users

2. All personal data permanently deleted within **30 days**

3. Profile picture and all uploaded images deleted from Cloudinary

4. All chat conversations, text messages, and voice messages permanently deleted

5. All job requests and you created are deleted

6. All push notification records deleted

7. CNIC/verification documents permanently deleted *(where applicable — security-sensitive workers only)*

8. All coins balance and rewards history permanently deleted

9. Firebase Auth account permanently removed — you cannot log back in

10. Reviews you wrote: name replaced with **"Anonymous"** — reviews remain for platform integrity

11. Some financial transaction records retained up to 7 years for legal compliance

---

## 9. Delete Specific Data (Without Deleting Account)

WorkBridge gives you granular control to delete individual data items without closing your entire account:

### 📸 Profile & Photos

| Data | How to Delete |

|------|--------------|

| Profile picture | Profile → Edit Profile → Edit Photo → **Remove Photo** |

| Background/header image | Profile → Edit Profile → Edit Background → **Remove Background** |

| Portfolio images | Profile → Portfolio → Long Press Image → **Remove** |

### 📋 Listings & Services

| Data | How to Delete |

|------|--------------|

| Service listings | Profile → My Services → Delete Listing |

| Property listings | Profile → My Properties → Delete |

| Portfolio items | Profile → Portfolio → Remove Item |

### 💬 Chat & Messages

| Data | How to Delete |

|------|--------------|

| Individual chat messages | Open Chat → Long Press Message → **Delete** |

| Entire conversation | Conversations List → Long Press → **Delete** |

| Voice messages | Open Chat → Long Press Voice Message → **Delete** |

### ⭐ Reviews & Ratings

Reviews you have submitted are **permanent** and cannot be individually deleted. This policy:

- Maintains platform integrity and fairness

- Protects service providers from manipulation

- Ensures transparency for future customers

If you delete your account, your reviews remain but your name becomes **"Anonymous"**.

### 📅 Booking History

Booking records are **permanent** and cannot be individually deleted, because:

- They serve as legally binding records of completed transactions

- They are required for dispute resolution

- They ensure accountability for both parties

### 🪙 Rewards & Coins *(Workers Only)*

- Coins balance and rewards history **cannot be individually deleted** while your account is active

- All coins and rewards history are **permanently deleted** when you delete your entire account

- Coins cannot be withdrawn or transferred before account deletion — they are lost upon account deletion

### 📍 Location Data

Stop new location data collection:

- **Android:** Settings → Apps → WorkBridge → Permissions → Location → Deny

- **iOS:** Settings → Privacy & Security → Location Services → WorkBridge → Never

### 💳 Financial & Sponsorship Data

Contact workbridgesupport@gmail.com to request removal of saved financial information. Transaction history required for legal compliance cannot be removed before the 7-year retention period.

> ⚠️ **Important:** If you have a remaining wallet balance, please **use it fully before deleting your account**. Any balance remaining at the time of account deletion is **permanently forfeited and non-refundable**. No exceptions apply.

### 🪪 CNIC / Verification Documents *(Security-Sensitive Workers Only)*

CNIC and verification documents — where collected — are retained for the full **lifetime of your account** to maintain platform integrity and identity verification. **They cannot be removed independently while your account is active.** To permanently remove your verification documents, you must delete your entire account:

Profile → Settings → Account Settings → Delete Account

---

## 10. Specific Feature Privacy Details

### 10.1 In-App Chat (Messaging Feature)

- Text messages, images, and voice messages stored on Firebase Firestore and Cloudinary

- All transmitted over TLS encrypted connections

- Chat history retained for 1 year from last activity

- Delete individual messages: Long Press → Delete

- Delete entire conversations: Conversations List → Long Press → Delete

- On account deletion: all conversations permanently removed

### 10.2 Push Notifications

- Sent via Firebase Cloud Messaging (FCM)

- Triggers: job requests, booking updates, messages, payment confirmations, promotions

- FCM token deleted when account is deleted

- Disable: Profile → Settings → Notifications

### 10.3 Location Services

- GPS accessed only while the app is in active foreground use

- Location history retained for 90 days

- Disabling location permission limits location-based features but does not prevent app use entirely

### 10.4 Ratings and Reviews System

- Customer reviews are publicly visible on worker/firm profiles

- Reviews are **permanent** — cannot be edited or deleted by the reviewer

- **WorkBridge administrators have the full authority to delete any review or rating at any time** if it is found to be:

 - Fraudulent or fake

 - Self-added (worker/firm adding reviews to their own profile directly or through third parties)

 - Manipulated, purchased, or coordinated

 - Abusive, offensive, or in violation of platform policies

 - Suspicious in pattern or origin

- Workers or firms found to be manipulating their own reviews may face account suspension or permanent deletion

- On account deletion: reviewer name becomes **"Anonymous"**

### 10.5 Booking History

- All booking records are permanent and cannot be deleted by users

- Ensures accountability, dispute resolution, and legal transaction records

### 10.6 Wallet and Financial Transactions

> ⚠️ **Critical Section — Please Read Carefully Before Topping Up**

#### The Most Important Point:

**WorkBridge does NOT perform any kind of in-app purchase or in-app financial transaction. There is NO payment gateway inside the app. All payments happen entirely OUTSIDE the app through third-party channels.**

---

#### How the Wallet Works — Step by Step:

**Step 1 — Top-Up (happens OUTSIDE the app):**

- Workers or Firms send money to **Velanta Pvt Ltd's official bank account** via JazzCash, EasyPaisa, Bank Transfer, or PayFast Pakistan — completely outside the WorkBridge app

- WorkBridge has **no in-app payment button, no card input, no payment gateway, no in-app purchase** of any kind

**Step 2 — Ledger Update (inside the app):**

- After sending payment outside the app, the worker/firm contacts WorkBridge support with proof of payment

- WorkBridge support manually verifies and **credits the wallet as a ledger entry**

- The balance shown in the app is a **record/ledger number only** — not a live bank account

**Step 3 — Using the Balance:**

- Workers use their wallet balance **only inside the app** to access and respond to job requests (a small fee is deducted when accepting a job)

- Firms use balance to access service requests and platform features

- **The topped-up amount can ONLY be used inside the WorkBridge app — it cannot be used for anything outside the app**

---

#### Payment Processor — PayFast Pakistan:

We use **PayFast Pakistan** as one of our supported payment processors for wallet top-ups. All payment transactions processed via PayFast are handled securely by PayFast's own systems. We do **not** store or process your payment card or banking details directly in our app.

- PayFast Privacy Policy: https://www.payfast.pk/

---

#### 🚫 Non-Refundable Policy — IMPORTANT:

> **All amounts sent to Velanta Pvt Ltd's company account are strictly NON-REFUNDABLE.**

- Once a worker or firm sends money to the company account and it is credited to their wallet, **that amount will NOT be refunded under any circumstances**

- If a worker or firm wishes to delete their account, they should **first use their entire wallet balance** before requesting account deletion

- If an account is deleted while a wallet balance still remains, **the remaining balance is permanently forfeited** — it will not be refunded, transferred, or compensated in any way

- WorkBridge strongly advises all workers and firms to **use their wallet balance fully before deleting their account**

- No exceptions to this non-refundable policy will be made, except in the case of a verified technical error on WorkBridge's part

---

#### What the Wallet CANNOT Do:

| ❌ | Restriction |

|----|------------|

| **No withdrawals** | Balance cannot be cashed out or transferred to any bank, JazzCash, or EasyPaisa |

| **No transfers** | Balance cannot be sent to any other user or external account |

| **No external use** | Balance can ONLY be used inside the WorkBridge app |

| **No refunds** | Topped-up amounts are non-refundable once credited to the wallet |

| **No real-time transactions** | No live payment processing inside the app |

| **Not a bank or e-wallet** | WorkBridge is not a fintech, bank, or payment service provider |

---

#### Wallet Data We Store:

- Current wallet balance (ledger figure only)

- Top-up records: amount, date, payment method

- Deduction logs: balance used to access job requests

- All records retained **7 years** for legal/tax compliance

#### On Account Deletion:

- Any remaining wallet balance is **permanently forfeited** — no refund, no transfer

- WorkBridge does **not store** any card numbers, bank account numbers, or financial credentials

### 10.7 Sponsorship (Promote Yourself Feature)

- Subscription details stored on Firebase; records retained 7 years for financial compliance

- Payments for sponsorship are made via JazzCash, EasyPaisa, or Bank Transfer — all processed outside the app wallet

### 10.8 Biometric Authentication

- Uses device's built-in fingerprint or face recognition hardware

- **Biometric data never leaves your device**

- Only an encrypted credential flag stored locally on your device

### 10.9 Property Listings

- Publicly visible within the app; images stored on Cloudinary

- Listing owners can delete their own listings at any time from their profile

### 10.10 Rental Car Services

- Booking details stored on Firebase

- Follows the same permanent booking retention policy

### 10.11 User Activity Tracking

- "Last active" timestamp updated every 2 minutes while using the app

- Used only to show active/online status to other users

- **Never shared with advertisers or third parties**

### 10.12 Rewards & Coins System *(Workers Only)*

WorkBridge operates a coin-based rewards system exclusively for workers. Here is how it works and how your data is handled:

**How Coins Are Earned:**

- Workers earn **50 coins** for every successfully completed job

- Coin balance is automatically calculated from the worker's completed job history

**What Coins Can Be Used For:**

- Redeeming against service request acceptance fees

- Unlocking premium features on the platform

- Boosting and featuring your worker profile

- Getting discounts on sponsorship packages

- Earning bonus rewards at milestones

**Important Restrictions:**

- **Coins cannot be withdrawn as real money or transferred to a bank account**

- Coins have no cash value outside the WorkBridge platform

- Coins are non-transferable between accounts

- Coin balance is tied to your WorkBridge account and is deleted if the account is deleted

**Data We Store for Rewards:**

- Total coins earned (calculated from completed jobs)

- Number of completed jobs

- Coin redemption history

**Coin Conversion Rate:**

- 100 coins = Rs 10 in platform value (10% value rate)

- Conversion rate may change — users will be notified in advance

**On Account Deletion:**

- All coin balance and rewards history are permanently deleted

- Coins cannot be redeemed or transferred before account deletion

### 10.13 Platform Right to Delete Accounts and Content

WorkBridge reserves the **full and unconditional right** to delete, suspend, or permanently terminate any user account — whether a **Customer, Worker, or Firm** — at any time, without prior notice, if the platform determines or reasonably suspects that the user is:

- Committing fraud of any kind

- Adding fake, self-generated, or manipulated reviews or ratings

- Impersonating another person, business, or entity

- Using the platform for illegal activities

- Violating any part of our Terms of Service or Privacy Policy

- Engaging in harassment, abuse, or threats toward other users

- Attempting to bypass or exploit platform security or systems

- Creating multiple accounts to abuse platform features

- Providing false identity or verification information (including CNIC fraud)

- Acting in any way that harms the platform, its users, or its integrity

**What "without notice" means:**

- WorkBridge may act immediately upon detection of suspicious or fraudulent activity

- No prior warning, email, or in-app notification is required before account deletion in fraud cases

- The deleted user will lose access to their account, all data, wallet balance, coins, and any active sponsorship plans immediately

- Any active bookings may be cancelled at WorkBridge's discretion

- Refunds for sponsorship plans will not be issued in cases of policy violation or fraud

**Data After Forced Deletion:**

- Personal data is purged within 30 days per our standard deletion policy

- Financial and transaction records may be retained for up to 7 years for legal compliance and fraud investigation purposes

- Reviews left by a forcibly deleted account remain on the platform but the name becomes **"Anonymous"**

This right exists to protect the safety, trust, and integrity of the entire WorkBridge community.

### 10.14 Crash Reports and Performance Analytics

WorkBridge collects crash and performance data to improve the stability and quality of the app. Here is exactly what is collected and how it is used:

#### What We Collect:

| Data Type | Purpose |

|-----------|---------|

| **Crash logs** | Records of app crashes — including the error type, stack trace, device model, OS version, and app version at time of crash |

| **ANR (App Not Responding) reports** | Records when the app freezes or becomes unresponsive |

| **App performance metrics** | Screen load times, network response times, slow rendering frames |

| **Error logs** | Non-fatal errors and exceptions that affect user experience |

| **Device state at crash** | Battery level, available memory, network state at time of crash |

#### What We Do NOT Collect Through Analytics:

- Your personal identity is **never linked** to crash reports

- No chat messages, photos, or personal content are included in crash reports

- No financial data or wallet information is included

#### How It Is Used:

- To identify, diagnose, and fix bugs and crashes quickly

- To improve app performance and stability

- To prioritize development based on the most impactful issues

- **Never used for advertising or marketing purposes**

#### Powered By:

- **Firebase Crashlytics** (Google) — crash reporting

- **Firebase Performance Monitoring** (Google) — performance metrics

- Both are governed by Google's Privacy Policy: https://policies.google.com/privacy

#### How to Opt Out:

You cannot fully opt out of crash reporting while using the app, as it is essential for maintaining app quality and safety. However, crash data is anonymised and never linked to your personal identity.

---

## 11. Children's Privacy

WorkBridge is intended for users **16 years of age and older**.

- We do not knowingly collect personal information from anyone under 16

- Users must confirm they are 16 or older during registration

- If we discover an account belonging to a user under 16, we will immediately delete the account and all associated data

- Parents/guardians who believe their child under 16 has used WorkBridge should contact us immediately at workbridgesupport@gmail.com

---

## 12. Third-Party Services and Their Privacy Policies

By using WorkBridge, you also agree to the privacy policies of our integrated services:

| Service | Privacy Policy URL |

|---------|------------------|

| Google Firebase | https://firebase.google.com/support/privacy |

| Google Sign-In & Maps | https://policies.google.com/privacy |

| Cloudinary | https://cloudinary.com/privacy |

| JazzCash | https://www.jazzcash.com.pk/privacy-policy |

| EasyPaisa | https://easypaisa.com.pk/privacy-policy |

| PayFast Pakistan | https://www.payfast.pk/ |

WorkBridge is not responsible for the privacy practices of these third-party services.

---

## 13. International Data Transfers

WorkBridge operates primarily in Pakistan. Our third-party providers (Firebase/Google Cloud, Cloudinary) operate globally and may process data on servers outside Pakistan, including in the United States and European Union.

By using WorkBridge, you consent to these international transfers, which are protected by:

- Contractual data protection obligations with service providers

- Industry-standard TLS/SSL encryption during transit

- Compliance with Google Cloud's data protection standards

---

## 14. Pakistan Data Protection Compliance

- **Prevention of Electronic Crimes Act (PECA) 2016** — fully compliant

- **Personal Data Protection Bill (Pakistan)** — best practices followed

- **State Bank of Pakistan Regulations** — payment data handling compliant

- **Pakistan Telecommunication Authority (PTA) Guidelines** — mobile app regulations followed

---

## 15. California Privacy Rights (CCPA)

If you are a California resident:

- **Right to Know** — what personal data we collect and use

- **Right to Delete** — request deletion of personal information

- **Right to Opt-Out** — opt out of data sale *(WorkBridge does NOT sell personal information)*

- **Right to Non-Discrimination** — equal service regardless of exercising privacy rights

Contact: **workbridgesupport@gmail.com** (subject: "California Privacy Rights Request") — Response: 45 days

---

## 16. European Users — GDPR Rights

### Legal Basis for Processing:

| Purpose | Legal Basis |

|---------|------------|

| Providing our services | Contract performance (Art. 6(1)(b)) |

| Security and fraud prevention | Legitimate interests (Art. 6(1)(f)) |

| Marketing communications | Consent (Art. 6(1)(a)) |

| Legal compliance | Legal obligation (Art. 6(1)(c)) |

### Your GDPR Rights:

- **Right of Access (Art. 15)** – Request a copy of your personal data

- **Right to Rectification (Art. 16)** – Correct inaccurate or incomplete data

- **Right to Erasure / "Right to be Forgotten" (Art. 17)** – Request deletion

- **Right to Restriction of Processing (Art. 18)** – Limit how we use your data

- **Right to Data Portability (Art. 20)** – Receive data in machine-readable format

- **Right to Object (Art. 21)** – Object to certain processing

- **Right to Withdraw Consent (Art. 7(3))** – Withdraw consent at any time

Contact DPO: **workbridgesupport@gmail.com** — Response: 30 days

---

## 17. Changes to This Privacy Policy

- **Material changes:** in-app notification + email at least 7 days before taking effect

- **Minor changes:** updated "Last Updated" date only

- **Continued use** after effective date = acceptance of updated policy

Current version always available at: **Profile → Settings → Privacy Policy**

**Version History:**

- v1.0 – March 16, 2026: Initial version published at app launch

---

## 18. Contact Us

| Contact Type | Details |

|-------------|---------|

| **General Privacy Inquiries** | workbridgesupport@gmail.com |

| **Customer Support** | workbridgesupport@gmail.com |

| **Data Protection Officer (DPO)** | workbridgesupport@gmail.com |

| **GDPR Requests** | workbridgesupport@gmail.com |

| **Legal** | workbridgesupport@gmail.com |

**In-App:** Profile → Settings → Help & Support → Contact Us

**Response Times:**

- Privacy requests: 48 hours

- Data deletion requests: 7 business days

- GDPR requests: 30 days

- CCPA requests: 45 days

**Mailing Address:** Velanta Pvt Ltd, House # 92, Sitara Valley Phase 3, Faisalabad, Punjab, Pakistan 

---

## Acknowledgment

BY DOWNLOADING, REGISTERING FOR, OR USING THE WorkBridge APPLICATION, YOU CONFIRM THAT:

1. You have read and understood this Privacy Policy in full

2. You are at least **16 years of age**

3. You agree to be bound by the terms of this Privacy Policy

4. You consent to the collection, use, and sharing of your information as described herein

If you do not agree, you must not use WorkBridge Services.

---

**Last Updated:** May 26, 2026

**Effective Date:** May 26, 2026

**Version:** 1.2.14 

**App:** WorkBridge (com.workbridge.nexora)

© 2026 Velanta Pvt Ltd. All rights reserved.