Privacy Policy

1. Introduction

Workfile Solutions, a sole proprietorship of Navin Singh, based in Greater Noida, Uttar Pradesh, India ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Workfile Store, our eCommerce platform at workfile.io and related domains, and when you use your Workfile ID.

MealStack, our nutrition practice platform, has its own privacy policy, which applies whenever you use MealStack, including the MealStack app.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, password when you create a Workfile ID
• Business Information: Store name, business address, GST number, PAN, bank account details for merchants
• Payment Information: Billing address, payment method details (processed securely via Razorpay/Stripe)
• Content: Products, images, descriptions, and other content you upload to your store
• Communications: Messages, support tickets, and feedback you send us

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Cookies: Session cookies, authentication tokens, preference cookies
• Analytics: Aggregated data about platform usage and performance

2.3 Your Workfile ID

A Workfile ID is the one account you use to sign in to every Workfile product: Workfile Store dashboards, store accounts, and MealStack. It holds your name, email address, phone number if you add one, and your password, which is stored only as a secure hash. It also keeps a record of your active sign-ins so that you can stay signed in across our products.

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining our eCommerce platform services
• Processing transactions and sending related information
• Managing your account and providing customer support
• Sending administrative information, updates, and marketing communications
• Analyzing usage patterns to improve our services
• Detecting, preventing, and addressing fraud and security issues
• Complying with legal obligations including GST and tax regulations

4. Information Sharing

We may share your information with:

• Payment Processors: Razorpay and Dodo Payments for our own subscriptions, and Razorpay, Stripe or another gateway a merchant connects for payments in their store
• Cloud Providers: Supabase (database, AWS Mumbai), Vercel (hosting), Cloudflare (file storage and content delivery), and Upstash (caching) for hosting and infrastructure
• Email and Sign-In: Resend for transactional email, and Google when you choose to sign in with Google
• Analytics Services: To understand platform usage (anonymized data)
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales

We do not sell your personal information to third parties for marketing purposes. Every provider we share personal data with is bound to protect it to the same standard as this policy.

5. Data Security

We implement industry-standard security measures to protect your data:

• SSL/TLS encryption for all data transmission
• Encrypted storage for sensitive information
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• PCI-DSS compliant payment processing through certified providers

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information as required by law (e.g., tax records for 7 years as per Indian regulations) or for legitimate business purposes such as resolving disputes and enforcing agreements.

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict processing of your data
• Data portability - receive your data in a structured format
• Withdraw consent for marketing communications

To exercise these rights, contact us at info@workfile.io. We aim to respond within 30 days.

Deleting your Workfile ID. Email info@workfile.io from the address on your account and we will delete your Workfile ID and the personal data linked to it, except what the law requires us to keep, such as tax and invoice records, which we keep for 7 years. If you have a store, its orders and invoices are also records of your customers and are kept for the same period. If you use your Workfile ID only for MealStack, you can delete it yourself in the MealStack app, under You, then Privacy and your data.

8. Cookies Policy

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how you use our platform

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

9. Children's Privacy

Workfile Store is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children for it. If you believe we have collected information from a minor, please contact us immediately. MealStack clients under 18 use a Workfile ID only with the consent of a parent or guardian, under the MealStack privacy policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: