Privacy Policy

1. Who we are and what this policy covers

Neowork Ops is a business operations platform built and operated by Neowork Studios Inc., a company incorporated in British Columbia, Canada ("Neowork", "we", "us"). This policy explains how we handle personal information across this website (neoworkops.com) and the Neowork Ops application (app.neoworkops.com).

We are subject to British Columbia's Personal Information Protection Act (PIPA), and, where it applies, Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA). We wrote this policy to be read, not skimmed past — if anything in it is unclear, ask us at privacy@neoworkops.com.

We do not sell personal information. Not as a headline — as a rule.

2. Our privacy officer

PIPA requires us to designate someone accountable for our compliance. Our privacy officer can be reached at privacy@neoworkops.com. This is the address for access requests, correction requests, questions, and complaints — a person reads it, and we respond within 30 days as PIPA requires.

3. What we collect

Account information

When you create an account: your name, email address, and sign-in credentials (handled by our authentication provider — we never see or store your password), plus workspace details like your business name and team members' names and email addresses.

Billing information

When you subscribe: your billing contact, address, and subscription history. Card details go directly to our payment processor — they never touch our servers, and we cannot see them.

Workspace content

What you and your team put into Ops: jobs, clients, tasks, quotes, invoices, documents, and messages. This often includes personal information about your customers — section 6 explains how that layer is handled.

Support and enquiries

If you email us or use the contact form: your name, email, company, and whatever you write to us.

Technical information

Standard server logs: IP address, browser type, pages requested, and timestamps. We use these for security and to keep the service running — not to build profiles.

4. The Google Calendar integration

If you connect a Google Calendar, we access the calendars you choose so we can display your existing commitments alongside your Ops schedule. We store the authorization token and cache event details only as needed to show them to you. We do not use Google Calendar data for anything else, and disconnecting the integration in your settings (or from your Google account) removes our access and deletes the cached data.

Neowork Ops' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use information

We collect and use personal information only for purposes a reasonable person would consider appropriate:

• Providing, maintaining, and securing the service
• Setting up and administering your account and subscription
• Processing payments and sending invoices and receipts
• Responding to support requests and enquiries
• Sending service messages — security notices, billing, changes that affect you
• Investigating abuse, fraud, or security incidents
• Meeting legal obligations, such as tax record-keeping

If we ever need your information for a purpose not listed here, we will ask first.

6. Information in your workspace

Your workspace holds records about your own customers — their names, addresses, job histories, invoices. For that information, you are the organization accountable under PIPA (or the privacy law where you operate), and we process it only on your instructions: to store it, display it to your team, and run the features you use on it.

We do not mine workspace content, use it for advertising, or train models on it. Our staff access it only when needed to fix a problem you have asked us about, or where the law requires.

Collecting your customers' information lawfully — with the consent or authority your jurisdiction requires — is your responsibility, and our terms require it.

7. Cookies

We use only the cookies the service needs to function: session cookies that keep you signed in to the app. There are no advertising trackers and no analytics cookies — on this website or in the application. If that ever changes, this policy will change first.

8. Marketing email

We send marketing email — product announcements and product news — only to people who have expressly opted in, as Canada's Anti-Spam Legislation (CASL) requires. Every marketing message identifies us and includes a working unsubscribe link that takes effect within 10 days, though in practice it is immediate. Service messages about your account (billing, security, changes to the service) are not marketing and are sent to all account holders.

9. When we share information

We share personal information only with service providers who process it on our behalf, under contracts that limit what they may do with it:

• Clerk (United States) — authentication. Handles sign-in, names, and email addresses.
• Stripe (United States) — payment processing. Handles card details and billing; PCI-DSS certified.
• Cloudflare (global network, US-headquartered) — file storage and content delivery for documents and uploads.
• Google (United States) — only if you connect the Calendar integration, as described in section 4.

Beyond service providers, we disclose personal information only:

• When the law requires it — a court order, subpoena, or other legal obligation binding on us
• In a business transaction such as a merger or acquisition, in which case this policy continues to protect the information and we will notify you
• With your consent, in situations not covered above

10. Where your information is stored

Our own infrastructure — the databases and servers that hold your workspace — is positioned in Canada wherever we can arrange it. Some of the service providers listed above process information in the United States or other jurisdictions. Information stored outside Canada is subject to the laws of the jurisdiction it sits in, and may be accessible to that jurisdiction's authorities under lawful process.

Questions about where any particular category of information lives can be directed to our privacy officer.

11. How we protect it

Information is encrypted in transit (TLS) and at rest. Access within Neowork is limited to the people who need it to operate the service, access to production systems is authenticated and logged, and backups are encrypted. No one can honestly promise perfect security — what we promise is that if a breach creates a real risk of significant harm to you, we will notify you and the appropriate authorities without unreasonable delay.

12. How long we keep it

• While your account is active: we keep what the service needs to function.
• When your account closes: workspace content is deleted from production within 30 days, and falls out of all backup sets within 90 days of that deletion.
• Financial records: invoices and payment records relating to your subscription are kept for 7 years, as Canadian tax law requires.
• Support correspondence: kept as long as useful for resolving your issues, then deleted.

13. Your rights

Under PIPA you can:

• Access the personal information we hold about you, and learn how it has been used and disclosed
• Correct information that is inaccurate or incomplete
• Withdraw consent to collection or use, subject to legal and contractual limits — we will explain the consequences before acting

Send requests to privacy@neoworkops.com. We respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Information and Privacy Commissioner for British Columbia.

If you are a customer of one of our customers — your information is in someone's workspace — contact that business directly, since they control the record. If you cannot reach them, contact us and we will help route the request.

14. Who may use Ops

Neowork Ops is a business tool, offered to organizations and the people working in them. It is not directed at children, and you must be of the age of majority in your jurisdiction (19 in British Columbia) to hold an account. We do not knowingly collect personal information from minors.

15. Changes to this policy

When we change this policy, we update the date at the top and describe the change. For changes that matter — new categories of collection, new kinds of sharing — we notify account holders by email before the change takes effect. We do not rewrite history quietly.

16. Contact

Privacy officer: privacy@neoworkops.com
General enquiries: support@neoworkops.com
Neowork Studios Inc., British Columbia, Canada