Privacy Policy
Effective date: 2026-11-10
This policy explains how Qortiva LLC ("we") handles personal information in Workslip. Workslip is used by businesses ("Customers") to calculate pay for their subcontractors and crew ("Workers"). For Worker information, the Customer decides what is collected and why; we process it on the Customer's behalf under our Data Processing Addendum.
Information we collect
From Customers (business owners and admins)
- Name, email, and Jobber user and account identifiers received when you connect Jobber.
- Jobber access tokens (stored encrypted) so we can read your visit data.
- Settings, pay rules, approvals, and adjustments you enter.
- Billing information. Our payment processor, Stripe, collects your card details directly; we never receive or store full card numbers. We keep your Stripe customer ID, subscription status, renewal dates, and a record of the renewal terms you agreed to.
About Workers
- Name and email address entered by the Customer.
- Work records from the Customer's Jobber account: visit titles, job numbers, scheduled and completed times, and which Worker was assigned. We do not show Workers the prices charged to clients.
- Pay amounts, statements, disputes, and notes.
- Mobile number and texting consent (optional). If a Worker chooses to receive texts, we keep their verified mobile number and a record of their consent (the wording they agreed to, the time, and the IP address), plus any STOP or START replies.
- Notification preferences, and records of the emails and texts we send.
- Photos, receipts, and documents Workers upload. Photos taken on phones can contain hidden location (GPS) data and other metadata. Turn off location tagging in your camera settings if you don't want this stored.
Automatically
- IP address, browser type, and request logs used for security, rate limiting, and troubleshooting.
- One strictly necessary session cookie to keep you signed in, plus a short-lived cookie used during the Jobber sign-in process. Stripe's checkout and billing pages, which you visit on Stripe's website, set their own cookies for fraud prevention under Stripe's privacy policy. We do not use advertising or analytics cookies.
How we use information
To provide Workslip (sync visits, calculate pay, show statements, send sign-in links and the notifications people choose); to bill Customers; to keep it secure (authentication, fraud and abuse prevention, audit logs); to provide support; and to comply with law. We do not sell or share personal information for cross-context behavioral advertising, and we do not use Customer or Worker data to train AI models.
Text messages
Mobile numbers are used only to send the Workslip Worker Alerts described in the SMS Terms: sign-in links, verification codes, and pay statement notices. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party, except our SMS provider (Twilio) as needed to deliver messages. Reply STOP to opt out at any time.
Emails
We send transactional emails (sign-in links, account, security, and billing notices) and, if Workers leave them on, pay statement notifications. Every notification email has a one-click unsubscribe link. We don't send marketing emails without consent.
How we share information
- With the Customer: Workers' uploads, disputes, and activity are visible to the business that added them.
- With Workers: A Worker sees only their own work, pay, and finalized statements.
- Service providers (subprocessors): hosting, database, file storage, payment processing (Stripe), email delivery, and text-message delivery (Twilio) providers that process data only on our instructions. See the DPA for the current list.
- Jobber: we send requests to Jobber's API on the Customer's behalf.
- Legal: when required by law, or to protect rights, safety, and security.
- Business transfers: in a merger or acquisition, subject to this policy.
Retention
- Customer and Worker data is kept while the Customer's account is active.
- When a Customer disconnects Workslip, Jobber tokens are deleted immediately. Remaining Customer Data is deleted within 90 days, unless the Customer asks us to delete it sooner or law requires us to keep it longer.
- Sign-in links expire after 20 minutes and are single-use; phone verification codes expire after 10 minutes. Security logs are kept for up to 12 months.
- Billing records (invoices and payment history) are kept by us and Stripe for as long as tax and accounting laws require, typically 7 years, even after an account is deleted.
- STOP replies are kept indefinitely so we never text that number again by mistake.
- Businesses usually need to keep payment records for several years for tax purposes. Export your statements before disconnecting.
Security
Encryption in transit (HTTPS) and of Jobber tokens at rest (AES-256-GCM); hashed session and sign-in tokens; strict access separation between businesses; file-type checks on uploads; rate limiting; audit logs. No system is perfectly secure. If a breach affects your personal information, we will notify the affected Customers and, where required, individuals and regulators.
Your rights
Depending on where you live (for example California, Colorado, Virginia, the EU/UK), you may have rights to access, correct, delete, or receive a copy of your personal information, and to appeal a denial. Workers: because the business you work with controls your information in Workslip, please contact them first; we will help them respond, and you may also contact us. We will not discriminate against you for exercising your rights. You may use an authorized agent where the law allows.
Children
Workslip is for businesses and adult workers. It is not directed to children under 16, and we do not knowingly collect their information.
International users
Workslip is hosted in the United States. If you use it from elsewhere, your information will be processed in the U.S.
Changes
We will post updates here and change the effective date. For material changes, we will notify Customers in the app or by email before they take effect.
Contact
Qortiva LLC — support@qortiva.com