Privacy Policy

1. Data Controller & Processor

Provider Organizations act as the data controller for the employee information submitted through Anywrks — they determine what data is collected and for what purpose. Anywrks acts as a data processorand processes employee data solely according to the Provider Organization's instructions and for the purpose of providing the Anywrks platform.

Anywrks relies on trusted subprocessors to operate the platform, including cloud infrastructure providers, authentication providers, email delivery providers, and payment processors. These subprocessors are bound by data processing agreements and process data only as necessary to provide their services to Anywrks.

2. Information We Collect

From Provider Organizations (Admins)

• Business name, type, and address
• Account holder name, email address, and phone number
• Billing information (processed by our payment provider; we do not store full card numbers)
• Login credentials (hashed — we never store plain-text passwords)
• Usage data: pages visited, features used, timestamps

From Employees (via onboarding packets)

Employees complete onboarding forms assigned by their employer. The information collected depends on the forms included in the packet, and may include:

• Full legal name, preferred name, date of birth
• Home address, personal email, and phone number
• Social Security Number (SSN) — for W-4 and I-9 federal tax and eligibility forms
• Bank account and routing numbers — for Direct Deposit Authorization
• Government-issued ID documents (Driver's License, Passport, USCIS documents)
• Employment eligibility status and citizenship/immigration documents
• Professional certifications (e.g., First Aid & CPR)
• Electronic signatures

Automatically Collected

• IP address, browser type, device type
• Session activity and timestamps for audit log purposes
• Cookies for authentication and session management (no advertising cookies)

3. How We Use Your Information

• To operate and deliver the Anywrks platform
• To generate, store, and transmit onboarding documents on behalf of Provider Organizations
• To enable compliance tracking — certification expiration dates, overdue alerts, audit exports
• To authenticate users and prevent unauthorized access
• To process subscription payments
• To send transactional emails (onboarding links, access codes, expiration alerts)
• To provide customer support
• To improve the platform through aggregated, anonymized usage analytics

4. How We Share Your Information

We share personal information only in the following limited circumstances:

• Your Employer (Provider Organization). Employee data collected through onboarding packets is accessible to the Provider Organization that assigned the packet. Employees consent to this sharing when they complete their onboarding.
• Service Providers. We use trusted third-party infrastructure providers (cloud hosting, file storage, payment processing, email delivery). Each is bound by data processing agreements and privacy obligations.
• Legal Compliance. We may disclose information if required by law, court order, or to protect the safety and rights of Anywrks, our users, or the public.
• Business Transfers. If Anywrks is acquired or merged, user data may be transferred as part of that transaction. We will notify affected users before data is transferred and subject to a different privacy policy.

5. Data Storage & Security

We take the security of sensitive employment data seriously. Our security practices include:

• AES-256 encryption for all data at rest
• TLS 1.3 encryption for all data in transit
• Two-factor authentication (2FA) for all admin accounts
• SOC 2 certified infrastructure (via our cloud infrastructure providers)
• Role-based access controls — employees cannot access other employees' data

While we maintain commercially reasonable safeguards, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

International transfers: Data may be processed and stored in the United States by Anywrks and its service providers.

For full details, see our Security page.

6. Data Retention

• Active employee records are retained for as long as the Provider Organization maintains an active Anywrks subscription.
• Inactive employee records may be retained for periods necessary to satisfy legal, contractual, audit, and regulatory obligations applicable to the Provider Organization.
• Billing records are retained as required by applicable financial and tax regulations.
• Account deletion. Provider Organizations may request data deletion by contacting privacy@anywrks.com. Upon subscription termination, we will delete or anonymize personal data within 90 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to certain uses of your data

For employees: Because your data is processed on behalf of your employer (the Provider Organization), requests regarding your employment records should be directed to your employer first. You may also contact us directly at privacy@anywrks.com.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies that share data with advertising networks.

You may disable cookies in your browser settings, but doing so may prevent you from logging in to the Anywrks platform.

9. Children's Privacy

Anywrks is a business-to-business platform intended for use by adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided information through our platform, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top of this page and, for material changes, notify Provider Organizations via email or an in-app notice. Continued use of Anywrks after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, requests, or concerns, contact us at: