Privacy Policy

1. Information We Collect

We collect information you provide directly and information generated as you use the platform:

• Church and account details: church name, branch name, admin name and email, logo, chosen subdomain, and subscription and billing metadata.
• Member profile information: name, headline, biography, skills, industry, location, profile photo, availability, service details, and any links you add.
• Contact and enquiry data: names, email addresses, and phone numbers of members, and of employers or clients who send an enquiry through our contact form.
• CV content: if you use AI-assisted profile setup, the CV you upload is processed transiently to extract profile details and is not stored by us afterwards.
• Payment metadata: transaction references and status from Paystack. We never receive or store full card numbers.
• Technical data: log, device, and session information used for authentication, security, and reliability.

2. How We Use Your Information

We use personal information to:

• Create and operate church spaces and member profiles.
• Verify church membership through the access codes a church controls.
• Let employers and clients discover and contact members through our guided form.
• Process subscription payments and manage billing.
• Send transactional email such as verification, enquiry notifications, and receipts.
• Provide AI-assisted drafting to help members write their profiles.
• Maintain security, prevent abuse, and improve the service.

3. Legal Basis for Processing

Under the NDPR, we rely on: your consent (for example, when you create a profile or submit an enquiry); performance of a contract (providing a church its subscription); our legitimate interests (keeping the platform secure and improving it); and compliance with legal obligations.

4. How We Share Information

We share personal information only as needed to run the service:

• With the member's church: admins can see the profiles and enquiries belonging to their own members.
• With employers and clients: when they contact a member through the guided form, the member receives their message and details.
• With processors acting on our behalf: Paystack (payment processing), Supabase (database, authentication, and file storage), Resend (email delivery), and Anthropic (AI profile assistance).

We do not sell your personal information.

5. AI Processing of CVs

When a member chooses AI-assisted setup, the uploaded CV is sent to our AI provider (Anthropic) to extract details and suggest profile content. The file is processed transiently for that purpose and is not retained by WorkVine after processing.

6. How We Protect Contact Details

Members' phone numbers and email addresses are never displayed publicly on the talent pool. Interested employers and clients can only reach a member through our guided contact form, which relays the enquiry to that member. The member decides whether and how to respond.

7. Data Retention

We keep personal information for as long as a church space or member profile is active, and as needed to meet legal, tax, and accounting obligations. When a profile or church account is deleted, the associated personal data is removed or anonymised within a reasonable period, except where the law requires us to retain it.

8. Your Rights Under the NDPR

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing, and withdraw consent at any time.
• Request a copy of your data in a portable format.

Members can edit or delete their own profiles at any time from their dashboard. To exercise any other right, contact us at hello@workvine.app.

9. Data Security

We protect personal information using encryption in transit, access controls, role-based permissions, and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data and to address any issues promptly.

10. Children

WorkVine is intended for working-age professionals and the churches that serve them. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date above and, where appropriate, notify church admins.