Personal Information:

• Name, email address, and profile information
• Payment information (processed securely through Stripe)
• Government-issued ID for creator verification
• Tax information for creators (stored encrypted)

Usage Data:

• Platform interaction data and analytics
• Content viewing preferences and engagement
• Device information and IP addresses
• Session data and performance metrics

Content Data:

• Uploaded content, messages, and comments
• Live stream recordings (when enabled)
• Booking and consultation records

Platform Operations:

• Account creation and authentication
• Content delivery and personalization
• Payment processing and financial reporting
• Customer support and communication

Analytics & Improvement:

• Usage analytics to improve platform features
• Performance monitoring and optimization
• A/B testing for user experience enhancement

Safety & Security:

• Content moderation and community safety
• Fraud prevention and security monitoring
• Compliance with legal requirements

Data Storage:

• Data stored on secure Supabase infrastructure
• Regular automated backups with encryption
• Geographically distributed for performance and redundancy

Security Measures:

• Encryption in transit (TLS) and at rest
• Row-level security policies for data access

Data Retention:

• Active account data retained for service operation
• Deleted account data purged within 30 days
• If you started a free trial, a one-way fingerprint of the payment account you used (not the account itself) is kept after your account is deleted, only to prevent repeated free trials on that OnlyWorkLife platform. The free month is per member and per payment account on each OnlyWorkLife platform (e.g. only-hair and only-art are separate); no platform can read another's fingerprints
• Legal hold data retained as required by law
• Analytics data anonymized after 2 years

GDPR Rights (EU Users):

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Delete your personal data ("right to be forgotten")
• Right to Portability: Export your data in a portable format
• Right to Object: Object to processing of your personal data
• Right to Restrict: Limit how we process your data

CCPA Rights (California Users):

• Right to Know: Information about data collection and use
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of sale of personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices

Essential Cookies:

• Authentication and session management
• Security and fraud prevention
• Load balancing and performance optimization

Analytics Cookies:

• Usage analytics (anonymized)
• Performance monitoring
• A/B testing (with user consent)

You can manage cookie preferences in your account settings or browser settings.

Payment Processing:

Stripe (PCI DSS compliant) - processes all payment data securely

Infrastructure:

Supabase/AWS - provides secure, scalable backend infrastructure

Content Delivery:

Cloudflare - provides CDN and security services

Data may be transferred to and processed in countries other than your residence. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Privacy Shield equivalent protections
• Local data residency options where required
• Encryption in transit and at rest

OnlyWorkLife is operated by Warley Digital LLC, which is responsible for the personal information described in this policy.

Privacy Officer:

Data Subject Requests:

Submit requests through your account settings or email privacy@onlyworklife.com with:

• Full name and email address
• Specific request type (access, deletion, correction, etc.)
• Identity verification (required for security)

Regulatory Complaints:

EU users may file complaints with their local Data Protection Authority.

California users may contact the California Attorney General's office.

Our platform is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

If we become aware that a child under 13 has provided personal information, we will take steps to delete such information promptly.

We may update this privacy policy periodically. Material changes will be communicated via:

• Email notification to registered users
• Platform notification banner
• Updated "Last Modified" date

Continued use after changes constitutes acceptance of the updated policy.