Privacy Policy

1. Overview & Scope

At WorkFence Inc. ("WorkFence", "we", "us", or "our"), we are committed to protecting the privacy, security, and integrity of the data entrusted to us by developers, enterprises, and partners using our API platform.

This Privacy Policy explains how WorkFence collects, uses, stores, discloses, and safeguards information when you visit our website, subscribe to our API products (Courses API, Skills API, Roles API, Certificates API, and Employers API), or integrate our developer tooling into your software applications.

2. Information We Collect

We collect information in three main categories to operate and secure our developer platform:

• Account & Billing Information: Name, work email address, company organization name, password hashes, and billing details processed securely via PCI-compliant payment gateways.
• API Usage & Telemetry Data: API authentication tokens, origin IP addresses, HTTP request headers, query parameters, endpoint timestamps, response latency, and volume of requests consumed for rate limiting and billing.
• Technical Device Data: Browser user-agent strings, operating system, referring URLs, and diagnostic crash reports when accessing our developer portal or documentation.

3. How We Use Information

We process collected data exclusively for valid business and service delivery reasons, including:

• Provisioning, maintaining, and scaling API endpoints and gateway services.
• Authenticating API requests and enforcing tier-based rate limits.
• Calculating monthly API usage metrics and generating invoice receipts.
• Detecting, investigating, and mitigating malicious traffic, abuse, or security breaches.
• Communicating critical service updates, downtime notices, API schema deprecations, and security alerts.
• Improving taxonomies, query optimization, and platform performance.

4. Data Sharing & Third Parties

WorkFence does not sell, rent, or trade your personal data or application telemetry. We only share information with vetted infrastructure service providers bound by strict confidentiality and data protection agreements:

• Cloud Infrastructure Providers: Host servers, databases, and global CDN networks (e.g., AWS, Cloudflare).
• Payment Processors: PCI-DSS compliant gateways (e.g., Stripe) for recurring billing.
• Legal Compliance: When required by law, subpoena, court order, or to protect the safety and rights of WorkFence and its users.

5. Security & Retention

We employ industry-standard administrative, physical, and technical safeguards designed to protect data against unauthorized access, loss, or alteration. All API traffic requires encryption via TLS 1.3, and data at rest is encrypted using AES-256.

API access logs are retained for a default period of 90 days for operational debugging and auditing, after which telemetry data is aggregated or permanently purged.

6. Your Rights & Choices

Depending on your location (e.g., under GDPR or CCPA/CPRA), you possess specific rights regarding your personal information:

• Access & Export: Request a copy of your account profile and associated data logs.
• Rectification: Correct inaccurate or incomplete account details directly in your developer dashboard.
• Deletion / Erasure: Request permanent removal of your account and API credentials.
• Opt-Out: Unsubscribe from non-essential promotional communications at any time.

7. Cookies & Analytics

We use essential session cookies required for authentication in the developer dashboard and minimal privacy-focused web analytics to measure page visits and navigation patterns on our public marketing site. We do not use third-party cross-site advertising cookies.

8. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to our privacy team: