WorkBrag Privacy Policy

Last updated: September 10, 2026

This Privacy Policy explains how WorkBrag LLC, a New York limited liability company, 418 Broadway Ste N, Albany, NY 12207 ("WorkBrag," "we," "us," or "our"), collects, uses, and shares personal information when you visit workbrag.com, use the WorkBrag application, receive our text messages, or record a video through a WorkBrag link (together, the "Service").

WorkBrag serves two kinds of people, and this policy is written for both:

• Business users - owners and staff of the trade and home-service businesses that subscribe to WorkBrag. Section 2 is for you.
• Customers of those businesses - for example, a homeowner who received a text from WorkBrag on behalf of the business that just finished a job at their home. Section 3 is for you.

Sections 4 through 12 apply to everyone.

1. The short version

• We do not sell personal information. We do not share mobile phone numbers, text-message consent, or opt-in data with any third party or affiliate for their marketing or promotional purposes. Ever.
• We only text people who have agreed to receive texts, and every text includes a way to stop.
• Customer videos and reviews are used to help the business that did the work show it off, in the way the customer agreed to. WorkBrag features a customer's video in its own marketing only if the customer ticked the separate, optional box allowing that when they recorded. WorkBrag does not use customer videos to train its own AI models.
• Business users can disconnect any linked platform, export their data, and delete their account at any time.
• Anyone can ask us what we hold about them, ask us to correct or delete it, or withdraw consent, by emailing help@workbrag.com.

2. If you run a business on WorkBrag

2.1 What we collect

Information you give us

• Account details: your name, email, mobile number, password or sign-in method, and business details (business name, trade, service area, logo, website, address).
• Job details: the customer's first name, mobile number, job type, job address (street level, so we can label the post and detect when the job ends), the date, and any notes you add.
• Photos and media: before-and-after photos and other files you upload.
• Consent records: for each customer you enroll, how consent was obtained (web form, signed form, or verbal script), when, by whom, and the script version used.
• Messages: your replies to our texts (for example, "YES" to approve a post, or edit instructions) and any support emails.
• Billing details, when paid plans are available: plan, billing address, and the last four digits and expiration of your payment card. Full card numbers are handled by our payment processor and never touch our servers.

Information from platforms you connect

When you connect a Google, Meta (Facebook and Instagram), TikTok, or similar account, we receive what the platform's permissions allow, which may include your business profile details, reviews and ratings and the public names of reviewers, your posts and their performance, and your media. We store the access tokens for these connections in encrypted form. We do not receive or store your passwords for these platforms.

Google Calendar

If you connect Google Calendar, we read events from the one calendar you select, and no others. From each event we store its title, description, location, start time, end time, and the attendee details the event carries, which may include email addresses and phone numbers. We use the description and attendee details to match an event to the right job, to work out which of your crew was on it, and, for an event that looks like a customer job, to create that job in WorkBrag with the customer's name and number the event carries. We contact that customer only when you tell us to, in reply to our text about the finished job. Event details are shown to you in WorkBrag and are not shown to anyone else.

Our access is read-only. We never create, change or delete anything on your calendar.

When you disconnect Google Calendar, we revoke our access and delete the event information described above.

Information collected automatically

Device and usage data such as IP address, browser and device type, pages viewed, actions taken in the app, and diagnostic logs. See Section 6 for cookies and similar technologies on our marketing website.

2.2 How we use it

• To run the Service: enroll your customers, send and receive text messages, host video capture pages, transcribe and edit videos, create draft posts, publish posts you approve, calculate your WorkBrag Score, and show you your reviews and post history.
• To secure accounts and prevent abuse, including verifying your mobile number with a one-time code and detecting messaging without consent.
• To support you and respond to your requests.
• To bill you, when paid plans are available.
• To send you service messages (text and email) about your account, your posts, and changes to the Service.
• To send you product news and offers by email, which you can opt out of at any time. We do not send marketing by text.
• To improve the Service, using aggregated or de-identified data where possible.
• To comply with law, enforce our Terms, and protect rights and safety.

2.3 Google user data

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google Business Profile data (your profile, reviews, posts, media) and Google Calendar data (events) only to provide the features you see in WorkBrag: showing your reviews, posting content you approve, replying to reviews on your instruction, calculating your WorkBrag Score, and detecting when a job ends.
• We do not transfer Google user data to anyone except as needed to provide those features (for example, to our hosting provider), for security, to comply with law, or as part of a merger or acquisition with your explicit prior consent.
• We do not use Google user data for advertising, and we do not sell it.
• Humans at WorkBrag do not read your Google user data except with your permission (for example, when you ask for support), for security or abuse investigations, or as required by law.
• We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.

You can revoke WorkBrag's access at any time at myaccount.google.com/permissions or from Settings in WorkBrag. When you disconnect, we delete the associated access tokens and stop syncing; we delete previously synced Google data within 30 days unless you ask us to keep specific items (for example, a post history) or we must keep it by law.

2.4 Meta and TikTok data

We use Facebook, Instagram, and TikTok data only to show your page reviews and recommendations, publish content you approve, and report on how those posts performed. We follow the Meta Platform Terms and TikTok Developer Terms. To delete the data we received from these platforms, disconnect the platform in Settings or email help@workbrag.com; we delete it within 30 days.

3. If you are a customer of a business that uses WorkBrag

You are reading this because a business you hired uses WorkBrag to ask customers for reviews and short videos after a job. Here is exactly what happens with your information.

3.1 How we got your information

The business you hired gave us your first name, mobile number, and basic details about the job (type and location) so that we could send you a text on their behalf. Before that, you agreed to receive texts from WorkBrag on behalf of that business, either on a web form, on a signed form the business gave you (for example, on an estimate or invoice), or by telling the business "yes" when they read you a short consent statement. We keep a record of that consent.

3.2 What we collect from you

• Your replies to our texts (including STOP or HELP).
• If you choose to record a video: the video itself, including your voice, your image, and anything visible in the frame, plus the date and time it was recorded and technical details about your device and browser.
• If you choose to leave a review, you do that directly on the third-party platform (such as Google). We do not collect the review from you; the business may see it through its own platform account, and we may display it to the business as part of their review feed.
• Basic technical data when you open our capture page (IP address, device and browser type), used for security and to make the page work.

3.3 How we use it

• To send you text messages about the job: the request, follow-up reminders if you have not responded, and a thank-you. Message frequency varies. We never send you promotions or marketing, and we never text you about anything other than that job unless you separately agree.
• To let you record and upload a video in your browser.
• To create a short branded post for the business that combines your video with the business's before-and-after photos, logo, and captions, using automated transcription and AI tools to pick a highlight and write captions. The business reviews and approves the post before it is published anywhere.
• To let the business publish that post to its own accounts on Google, Facebook, Instagram, TikTok, and similar platforms, and to its website and marketing, as described in the Video and Review Release you agree to before recording.
• To honor your opt-out and keep a record of your consent and opt-out as the law requires.

3.4 What we do not do

• We do not sell your information.
• We do not share your mobile number or consent data with anyone for marketing.
• WorkBrag does not use your video to train its own AI models. The AI vendors that process it act as our service providers and may use it only to provide their services to us.
• We do not add you to any list, database, or marketing program. The business you hired already had your number; we do not give it to anyone else.

3.5 Your choices

• Stop texts: reply STOP to any message, or email help@workbrag.com. You will get one confirmation text and nothing more.
• Don't record: recording a video is entirely optional. Not recording has no effect on your relationship with the business.
• Withdraw your video: you can withdraw your release at any time by emailing help@workbrag.com with the business name and your phone number. We will delete the video from our active systems within 30 days and instruct the business to take down posts containing it; copies in isolated backups expire on their normal cycle (currently within 35 days) and are deleted again if a backup is ever restored. Content already published to a third-party platform is controlled by the business and that platform, and we will ask the business to remove it.
• Access or delete: see Section 8.

3.6 Our role

For your information, WorkBrag generally acts as a service provider (or "processor") to the business that hired you: we handle your information on its instructions and under our contract with it. The business is responsible for having a lawful basis to give us your information. Separately, for text messaging, WorkBrag is the named sender of every message and is directly responsible to you for honoring your consent and opt-out choices.

4. How we share information

We share personal information only in these situations:

• With the business you hired (if you are a customer): your video, your replies, and the status of your review request are visible to the business.
• With service providers that help us run WorkBrag. They may only use the information to provide services to us. Current categories: cloud hosting and database (Supabase, Vercel), media storage and delivery (Cloudflare), text-message delivery (Twilio), speech-to-text transcription (Deepgram), AI caption and message-understanding services (Anthropic), video rendering (Creatomate), email delivery, payment processing (Stripe), error monitoring, and analytics.
• With the platforms you connect (if you are a business user): we send the posts you approve, and only those, to Google, Meta, TikTok, and any other platform you connect. Those platforms then handle that content under their own privacy policies.
• For legal reasons: to comply with a law, regulation, subpoena, or court order; to enforce our Terms; or to protect the rights, property, or safety of WorkBrag, our users, or the public.
• In a business transfer: if WorkBrag is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected users, and the new owner will be bound by this policy for information collected under it.
• With your direction or consent.

We do not sell personal information for money. The advertising cookies and pixels on our public marketing website described in Section 6 may be considered a "sale," "sharing," or "targeted advertising" under some state laws, and you can opt out of them as described there. We do nothing else that could be considered a sale or sharing. Mobile phone numbers, text-messaging consent, and opt-in information are never sold, shared with, or transferred to any third party or affiliate for marketing or promotional purposes, including lead generators, data brokers, and advertising networks.

5. Text messaging

Our text-messaging programs are described in full in our SMS Terms. In summary: we send texts to business users (login codes, approval requests, posting confirmations) and to customers of those businesses (a review and video request, follow-up reminders, and a thank-you). Consent is required for every number, is never a condition of purchase, and can be withdrawn at any time by replying STOP. Message and data rates may apply. Message frequency varies. We keep consent and opt-out records for at least five years so we can prove we honored your choices.

We do not share your mobile number or consent data with third parties for marketing.

6. Cookies, pixels, and analytics

In the WorkBrag application (app.workbrag.com and capture pages), we use only strictly necessary cookies and similar technologies: session cookies to keep you signed in, security tokens, and first-party analytics that help us understand which features are used. We do not run advertising pixels inside the app or on customer capture pages.

On our public marketing website (workbrag.com), we may use cookies and pixels from Google Analytics, Meta, and TikTok to measure our advertising and understand how visitors find us. These tools may collect your IP address, device identifiers, and pages viewed, and may allow those companies to link your visit to your account with them. Under some state laws this may be considered a "sale," "sharing," or "targeted advertising." You can opt out by:

• using the cookie banner or the "Do Not Sell or Share My Personal Information" link on our website;
• turning on the Global Privacy Control (GPC) signal in your browser, which we honor as an opt-out for that browser;
• adjusting your ad settings at Google, Meta, and TikTok, or using your browser's cookie controls.

We do not respond to "Do Not Track" signals, which have no common standard, but we do honor GPC.

7. How long we keep information

We may keep information longer if required by law or to resolve a dispute.

8. Your privacy rights

Whoever you are and wherever you live, you can email help@workbrag.com to:

• know what personal information we hold about you and get a copy in a portable format;
• correct inaccurate information;
• delete your information;
• withdraw consent (for texts, reply STOP; for your video, see Section 3.5);
• opt out of marketing emails (use the unsubscribe link) and of advertising cookies (see Section 6).

Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with consumer privacy laws have these rights by statute where the law applies to us, including the right to opt out of the sale of personal information, sharing for targeted advertising, and profiling that produces legal or similarly significant effects. We do not sell personal information, we do not profile anyone in a way that produces legal or similarly significant effects, and the only "sharing" for targeted advertising we do is the marketing-website advertising described in Section 6. We will not discriminate against you for exercising your rights.

How we verify you. We will ask you to confirm the email or mobile number on file, and may ask for more if needed to protect your information. You may use an authorized agent, and we will ask the agent for proof of authorization.

Appeals. If we decline your request, we will tell you why. You may appeal by replying to our decision with "Appeal" in the subject line; we will respond within 45 days. If you are still unsatisfied, you may contact your state attorney general.

Timing. We respond within 45 days of receiving a verifiable request, and may extend once by 45 days where the law permits, with notice to you.

California notice at collection. In the past 12 months we have collected the categories of personal information described in Sections 2 and 3: identifiers (name, email, phone, IP address), commercial information (plan and billing details), internet activity (usage data), audio and visual information (customer videos), geolocation at street-address level (job addresses), professional information (business details), and inferences used only to operate the Service (for example, the WorkBrag Score). Sources, purposes, and recipients are described above. We do not collect sensitive personal information as defined by California law except account login credentials, and we use those only to provide the Service. We do not knowingly sell or share the personal information of consumers under 16.

Requests from a business's customers. If you are a customer of a business and your request concerns information we hold as that business's service provider, we may forward your request to the business or ask you to contact it, but we will help you either way and will always honor a request to stop texting you or to delete your video.

9. Security

We use industry-standard measures to protect personal information: encryption in transit (TLS) and at rest, encrypted storage of platform access tokens, role-based access limited to the small number of people who need it, row-level access controls in our database, signed upload links so videos go directly to protected storage, logging, and regular review of our vendors' security practices. No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

10. Children

The Service is for adults. Business accounts require users to be at least 18. Our capture page asks anyone recording a video to confirm they are 18 or older, and we ask that no one under 18 appear in a video without a parent or guardian's permission. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email help@workbrag.com and we will delete it.

11. Where information is processed

WorkBrag operates in the United States, and our servers and service providers are located in the United States. The Service is intended for U.S. businesses and their customers. If you use it from outside the United States, you understand your information will be processed in the United States, where privacy laws may differ from those where you live.

12. Changes to this policy

When we change this policy, we will update the "Last updated" date. If a change materially affects how we use personal information we already hold, we will notify business users by email or in-app notice before it takes effect, and we will obtain consent where the law requires it. Earlier versions are available on request.

13. Contact us

Questions, requests, or complaints about privacy:

WorkBrag LLC Attn: Privacy 418 Broadway Ste N Albany, NY 12207 help@workbrag.com

For legal notices: legal@workbrag.com