Workflow Native Apps LTD (herein, referred also as the “Company", “Our”, “Us”, “We”) is a company registered in England and Wales. The Company’s footprint of data processing is very limited. The Company outsources its sales to authorized resellers that act as independent data controllers (as proper sellers, neither payment processors nor only marketplaces, or catalogues). Our resellers manage all private data including billing information (like e.g. credit card details), therefore, the Company does not have access to such data. And, Company’s IT infrastructure is either managed (like e.g. the e-mail box), serverless, or static.
1. ZERO-DATABASE INFRASTRUCTURE & DATA HANDLING
The Company does not maintain, own, or operate databases, user registration systems, or content management systems on this platform. Data handling is limited to the following operational scenarios:
A. Inbound Email Communications: When you voluntarily initiate contact with the Company via email then your email address, name (if provided), and the contents of your message are processed within the infrastructure of an outsourced email services provider that evaluate, respond to, and manage your inquiry. The Company does not operate own mail server, therefore, does not manage the processing and storage of received emails.
Legal Basis: Performance of a contract or steps taken to enter into a contract (UK/EU GDPR Article 6(1)(b)), or our legitimate interests in responding to business correspondence (Article 6(1)(f)).
B. Transient Technical Processing: When you access Our website, the hosting provider, SSL/TLS Certificate Authority (CA), edge caching layers, and Domain Name System (DNS) providers transiently process your IP address, browser type, operating system, and request metadata to deliver the Company’s files to your device.
Legal Basis: Our legitimate interests in operating a secure, encrypted, and resilient web infrastructure (UK/EU GDPR Article 6(1)(f)).
2. COOKIES AND TRACKING
Our website code does not set cookies or employ tracking scripts. Our edge routing and security providers may deploy strictly necessary session cookies solely for network security and traffic validation. We do not engage in cross-context behavioral advertising, user tracking, or profiling.
3. GLOBAL PRIVACY COMPLIANCE & US STATE RIGHTS
• Do Not Sell or Share: We do not sell, rent, release, disclose, disseminate, make available, transfer, or share personal data or IP logs with third parties for monetary or other valuable consideration, nor for targeted advertising.
• California "Shine the Light" & Minors: We do not disclose personal data to third parties for direct marketing purposes. Our platforms do not knowingly attract or process data from individuals under the age of 16.
• Automated Processing: We do not use automated decision-making or profiling algorithms that produce legal or similarly significant effects.
4. THIRD-PARTY STOREFRONTS AND MERCHANTS OF RECORD
Our software is distributed via native digital storefronts (such as the Microsoft Store, Apple App Store, and Snapcraft) and independent Merchants of Record (MoR). They are resellers so if you make a purchase via their systems then you make the purchases from/with them and, therefore, they manage your data. However, they manage your data according to their own policies independent from the Company’s policies. To use their services, you have to agree to their policies and agreements. We do not integrate our website or origin infrastructure with these platforms via APIs. All financial transactions, billing, and order handling occur entirely on the third party's platform under their respective privacy policies. No financial or transaction data passes through our infrastructure.
5. LOCAL DATA GOVERNANCE AND SOVEREIGNTY BOUNDARIES
• Data Architecture: We enforce a localized edge-delivery architecture. Transient technical routing data (such as IP addresses) is processed at regional network edges closest to the user to optimize performance and security, rather than being transferred to or consolidated within a centralized database.
• Distribution Isolation: All application distribution, localized tax collection, licensing compliance, and transaction data management are handled independently by third-party native storefronts and Merchants of Record within their respective local jurisdictions. We maintain no API integrations, shared databases, or data-sharing agreements with these entities.
• Data Sovereignty: Any personal data voluntarily transmitted to us via inbound email communications is transferred to, stored within, and governed by our corporate communication infrastructure under the jurisdiction of England & Wales. Where cross-border transfers occur, they rely on standard contractual clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or equivalent recognized adequacy mechanisms implemented by our infrastructure partners.
6. DATA RETENTION
• Email Communications: Retained for up to 7 years within our communication infrastructure to satisfy technical, contractual, or legal record-keeping requirements.
• Technical Network Logs: Stored transiently at network edges by our routing partners and overwritten or deleted within 30 days, unless required for ongoing security incident mitigation.
7. YOUR LEGAL RIGHTS
Depending on your jurisdiction (including the UK, EEA, and various US states), your legal rights include:
• Access, Rectification, or Deletion: The right to request confirmation of, access to, correction of, or deletion of your personal data.
• Objection or Restriction: The right to object to or restrict processing of your personal data.
• Non-Discrimination: We will not discriminate against you in pricing, service quality, or access for exercising any statutory privacy rights.
To exercise rights regarding email records, contact us directly. For infrastructure logs, we do not link IP addresses to named identities; verification requires you to supply your static IP address. You have the right to lodge a complaint with your local data protection authority (such as the UK Information Commissioner's Office or your relevant EU/global supervisory authority).
8. SEPARATE END USER LICENSE AGREEMENTS (EULA)
This Privacy Policy governs our web presence only. Every application distributed by us is governed by its own independent End User License Agreement (EULA).
9. GOVERNING LAW, SEVERABILITY, AND CHANGES
This Privacy Policy is governed by the laws of England and Wales. If any provision of this policy is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions will continue in full force and effect. We reserve the right to update this policy to reflect infrastructural changes.
10. CORPORATE IDENTIFICATION AND CONTACT
This website is operated by Workflow Native Apps LTD, a company registered in England and Wales.
For any inquiries or to exercise your privacy rights under this policy, please contact us via the official channels listed on our website contact page.