WORKERZ.ORG — MASTER LEGAL & COMPLIANCE DOCUMENTATION

1.1. Introduction & Scope

Workerz.org ("we", "us", or "our") is a digital engineering studio headquartered in Islamabad, Pakistan, specializing in high-velocity custom software development, enterprise multi-warehouse ERPs, automated payroll systems, sub-second AI telephony platforms (VoiceX), multi-profile proxy browser workspaces (Switcher), lead generation extraction engines (Megaform, Number Revealer), and mobile applications.

This Privacy Policy governs the collection, processing, storage, and transfer of personal and operational data collected through our website (https://workerz.org), custom platforms, mobile apps published on the Google Play Store and Apple App Store, client staging environments, and API endpoints.

1.2. Information We Collect

We collect only the minimum information necessary to deliver, bill, secure, and maintain our engineering platforms.

A. Information You Provide Voluntarily

• Contact & Business Information: Full name, business email address, direct phone number / WhatsApp, company/organization name, geographic location, and project requirements submitted via our technical discovery forms or email.
• Account Credentials: Usernames, email addresses, and cryptographically salted and hashed passwords (we never store plain-text passwords).
• Payment & Invoicing Information: Business name, billing address, VAT/tax identifiers, and transaction references. All card transactions and online payments are handled directly by PCI-DSS Level 1 certified processors (e.g., Stripe, PayPal, JazzCash/Easypaisa). We never store raw credit card numbers or CVV codes.
• Client-Controlled Project Data: Data uploaded, processed, or imported by clients into custom systems we develop (such as warehouse stock records, employee attendance logs, lead records, or voice scripts). The client retains full ownership and Data Controller status for this data.

B. Information Collected Automatically

• Device & System Diagnostics: Browser type and version, operating system, device manufacturer/model, screen dimensions, language preferences, and IP address.
• Usage & Telemetry Logs: API endpoint access timestamps, response latencies, pages viewed, crash dumps, and referring URLs to ensure server stability.
• Cookies & Local Session Tokens: Essential authentication tokens and preference cookies (see Section 4).

1.3. Legal Bases for Processing (GDPR Art. 6)

We process personal information under the following lawful grounds:

• Contractual Performance (Art. 6(1)(b)): To deliver software, provision license keys, host staging environments, and fulfill client agreements.
• Legal Obligations (Art. 6(1)(c)): To maintain accounting records, tax documentation, and comply with lawful statutory requests.
• Legitimate Business Interests (Art. 6(1)(f)): To protect our servers against cyberattacks, optimize platform performance, prevent fraudulent activities, and maintain business communications.
• Consent (Art. 6(1)(a)): Where you have explicitly opted into newsletters, discovery meetings, or optional analytical tracking.

1.4. Third-Party Sub-Processors & Service Providers

We partner with enterprise service providers who adhere to strict data security standards:

• Cloud & Hosting: Cloudflare (DDoS mitigation, CDN, DNS routing), Hostinger / AWS (virtual server instances).
• Payment Gateways: Stripe, PayPal (PCI-DSS compliant transaction billing).
• Telephony & Real-Time Voice: Twilio, Asterisk/SIP trunk providers (used exclusively for VoiceX telephony routing).
• App Distribution & Diagnostics: Google Play Console, Google Firebase (crashlytics, auth), Apple App Store.
• Analytics: Google Analytics 4 (anonymized IP logging for website traffic measurement).

1.5. International Data Transfers

Workerz.org operates globally with development teams in Pakistan and cloud infrastructure in Europe and North America. When transferring data across international borders, we utilize European Commission-approved Standard Contractual Clauses (SCCs) and robust cryptographic controls to guarantee equivalent levels of protection.

1.6. User Rights Under GDPR & CCPA

Depending on your jurisdiction, you have the following rights regarding your personal information:

• Right to Access / Know: Request a copy of all personal data held about you.
• Right to Rectification: Correct any inaccurate or outdated information.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your account and personal records.
• Right to Restriction / Objection: Restrict or object to specific types of data processing.
• Right to Data Portability: Receive your data in a structured, standard machine-readable format (JSON or CSV).
• Right to Non-Discrimination: We will never deny service, adjust pricing, or degrade performance if you exercise your statutory privacy rights.

To exercise these rights, email us at support@workerz.org or use our dedicated Data Deletion Request Page.

1.7. Children's Online Privacy Protection (COPPA)

Our websites, custom ERPs, SaaS applications, and tools are strictly intended for commercial enterprises, working professionals, and adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 13 (or under 16 in the European Union). If we discover inadvertent collection of a minor's information, we will delete it immediately upon notice at privacy@workerz.org.

1.8. Privacy Inquiries & Data Protection Contact

2.1. Agreement to Terms

By accessing https://workerz.org, engaging Workerz.org for software engineering services, using our SaaS platforms, or downloading our mobile applications, you agree to be bound by these Terms and Conditions. If you disagree with any part of these terms, you must discontinue use immediately.

2.2. Custom Software Engineering & Milestone Delivery

• Scope of Work (SOW): All custom engineering projects (ERPs, SaaS, APIs, custom mobile apps) are executed based on a written technical discovery document outlining specific milestones, deliverables, and timelines.
• Weekly Agile Staging Reviews: Clients receive access to live, clickable staging builds every week to test and verify completed milestone features.
• Milestone Acceptance: Upon client review and written or digital approval of a milestone build, that milestone is deemed accepted, and the corresponding milestone payment is released.

2.3. 100% Intellectual Property (IP) & Source Code Ownership

• Full Handover: Upon full payment of all contracted milestones for custom development projects, 100% of all intellectual property, source code, database schemas, custom graphic assets, and API configurations belong exclusively to the client.
• Zero Vendor Lock-In: Workerz.org does not impose recurring seat license fees, proprietary lock-ins, or ongoing royalties on custom code engineered for your private deployment.
• Workerz.org Pre-Existing Core: Any open-source libraries or standard architectural boilerplate components reused across projects remain licensed under standard open-source licenses (e.g., MIT/Apache 2.0).

2.4. Prohibited Uses & Acceptable Use Policy

Users and clients agree not to use Workerz.org platforms, APIs, or custom software for:

• Any unlawful, fraudulent, defamatory, or malicious activities.
• Distributing malware, ransomware, spyware, or conducting unauthorized network intrusion attacks.
• Harassing, spamming, or making non-compliant robocalls in violation of TCPA (Telephone Consumer Protection Act) or international telecommunication laws.
• Reverse-engineering or attempting to compromise the security perimeter of our staging servers and proprietary tools.

2.5. Payment Terms & Invoicing

• Invoices are issued per agreed project milestones.
• Accepted payment channels include international bank wire transfer, Stripe, PayPal, and regional corporate accounts.
• All fees are quoted in USD unless agreed otherwise in writing. Invoices must be settled within the timeframe specified in the project agreement (standard 7 business days).

2.6. Warranty, Bug Fixes & Limitation of Liability

• Warranty Period: Every custom platform developed by Workerz.org includes a 30-day post-launch warranty covering bug fixes and adjustments to ensure conformity with the approved Scope of Work at no additional charge.
• Disclaimer of Consequential Damages: To the maximum extent permitted by applicable law, Workerz.org shall not be liable for any indirect, incidental, special, consequential, or punitive damages (including loss of profits, data corruption, or business interruption) resulting from your use or inability to use the software.
• Total Liability Cap: In all circumstances, Workerz.org's total cumulative liability arising out of any engagement shall not exceed the total fees paid by the client under the specific project agreement in question.

2.7. Governing Law & Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of Islamabad, Pakistan, without regard to its conflict of law provisions. Any dispute arising out of or related to these Terms shall first be addressed through good-faith mutual negotiation. If unresolved within 30 days, disputes shall be submitted to binding arbitration in Islamabad, Pakistan.

3.1. Purpose & Compliance

In compliance with Google Play Store Developer Policies, Apple App Store Review Guidelines, and GDPR Article 17 (Right to Erasure), Workerz.org provides a clear, unconditional, and publicly accessible mechanism for any user to permanently delete their account and associated data.

3.2. How to Request Account & Data Deletion

Users can submit a deletion request through any of the following channels:

• Online Public Web Form: Navigate to https://workerz.org/data-deletion and submit your registered email address or account username.
• Direct Email Request: Send an email from your registered email account to support@workerz.org or ahmed@workerz.org with the subject line "Data Deletion Request".
• In-App Account Settings: Within any Workerz.org SaaS or mobile application, navigate to Settings > Account > Delete Account and confirm deletion.

3.3. Data That Will Be Permanently Deleted

Upon verification of the request, the following data is permanently purged from production databases:

• User profile details (name, email, phone number, company name).
• Encrypted login credentials and active session tokens.
• Cloud-stored user preferences, app state, and bookmarks.
• Uploaded project files, lead lists, or campaign files associated with the account.

3.4. Processing Timeframe & Retention Exceptions

• Turnaround Time: Deletion requests are processed and verified within 48 to 72 hours.
• Cold Storage Purge: Full eradication from automated encrypted rolling backups completes within 30 days.
• Statutory Retention Exceptions: Anonymized financial transaction records, tax invoices, and fraud-prevention logs are retained in cold offline storage solely for the minimum period required by applicable financial and tax laws.

4.1. What Are Cookies?

Cookies are small text files placed on your computer or mobile device when you visit our website or use our web applications. They allow us to recognize your device, maintain secure sessions, and understand how visitors interact with our platform.

4.2. Categories of Cookies We Use

4.3. Managing Cookie Preferences

You can control or disable cookies through your browser settings (Chrome, Safari, Firefox, Edge). Please note that disabling strictly necessary cookies may prevent certain features of our client portals and applications from functioning properly.

5.1. General Information Purpose

The content provided on https://workerz.org is for general informational and marketing purposes regarding our software engineering capabilities, architectural blueprints, and technology portfolio.

5.2. Third-Party Integrations & External APIs

Workerz.org platforms frequently interface with third-party software, cloud infrastructure providers, and external APIs (including Twilio, Stripe, Cloudflare, OpenAI, and Google Cloud). Workerz.org does not warrant or guarantee the uninterrupted uptime, pricing stability, or policy changes of independent third-party API providers beyond our direct control.

5.3. Telephony & Automated Communication Compliance Notice

Clients utilizing automated calling, telephony (VoiceX), SMS, or data extraction tools engineered by Workerz.org are solely responsible for ensuring their campaigns, scripts, and calling lists comply with all applicable local, national, and international laws, including the US TCPA, TSR, CAN-SPAM, GDPR, and Ofcom regulations. Workerz.org provides the technical infrastructure but acts solely as a technology service provider.

6.1. Technical Security Measures

Workerz.org implements multi-layered security controls across all codebases, web applications, and database architectures:

• 256-Bit TLS Encryption: All communications in transit are encrypted via HTTPS/TLS 1.3.
• Database Encryption & Salted Hashing: Passwords and sensitive keys are hashed using industry-standard algorithms (Bcrypt, Argon2) and encrypted at rest (AES-256).
• Multi-Tenant Isolation: Enterprise platforms employ strict tenant database separation and role-based access control (RBAC) to ensure zero cross-tenant data leakage.
• DDoS Mitigation & WAF: Global DDoS shielding, automated rate-limiting, and Web Application Firewall rules powered by Cloudflare.
• Automated Daily Backups: Redundant, encrypted daily database backups with automated disaster recovery protocols.

6.2. Vulnerability Reporting & Security Contact

We welcome responsible disclosure of any potential security vulnerabilities. If you discover a security flaw or anomaly, please report it directly to: