Your work data stays yours.

What we collect

We collect your account email, basic profile name, onboarding choices, opportunity information you choose to import, proposal drafts, workflow status, and subscription records. We also collect limited product events needed to understand activation, reliability, and plan usage.

What we do not collect

We do not ask for your Upwork password, browser session cookie, raw card details, identity documents, private-message history, contact book, or unrelated browsing activity. Google sign-in is limited to basic identity and email.

How we use data

• Protect and operate your RightWork account.
• Review opportunities and prepare drafts you request.
• Apply plan access, prevent abuse, and reconcile billing.
• Measure product performance using allowlisted events that exclude proposal text, credentials, and private client content.
• Respond to support, security, export, deletion, and legal requests.

Service providers and transfers

We use providers such as Google Firebase for authentication, hosting, and operational analytics, and Stripe for billing. Providers process data under their own security and privacy commitments. Data may be processed outside Singapore with safeguards intended to provide protection comparable to Singapore's PDPA requirements.

Retention and security

Account content is retained while your account is active and can be deleted on request. Security and audit records are normally retained for 30 days unless an incident or legal duty requires a documented hold. We use access controls, encrypted transport, server-only credentials, and human approval for marketplace write actions.

Your choices

You can ask to access, correct, export, or delete personal data, withdraw consent where applicable, or raise a privacy concern. Some billing records may be retained where law requires it.

Contact

Email hello@flowwweb.com with the subject “RightWork privacy”. We will verify the request before changing or releasing account data.