Instant Work Office Privacy, Security, and Data Notice

Scope

What this policy covers

This policy applies to InstantWorkOffice.com, the Instant Work Office application, account signup, login, Business Homepages, customer-facing proposal/payment workflows, support workflows, and related back-office tools.

Contractual terms for account access, billing, user content, acceptable use, disputes, and other service activity are published separately in the Terms of Service.

Instant Work Office is designed so that customer-facing pages collect and display information while protected business decisions, record changes, and workflow updates are handled through controlled backend services.

Personal and business info

Data we collect

Depending on the workflow you use, Instant Work Office may collect or process:

• Account identifiers such as user ID, name, display name, company name, email address, role, and account status.
• Signup details such as full legal name, birthday for age eligibility, business name, email, and password or Google sign-in.
• Business profile details such as phone, address, service area, public business statements, Business Homepage settings, support settings, proposal defaults, tax settings, and payment collection preferences.
• Customer, client, product, property, proposal, contractor, W-9 readiness, support, email workflow, and accounting-adjacent records that users enter into the workspace.
• Operational records such as audit logs, server workflow events, checkout records, payment status records, error diagnostics, timestamps, and security events.

Some information may be public when a user publishes it to a Business Homepage or sends it to a customer through a proposal, email, document, payment link, or support workflow.

Sensitive data notices

Privacy notices near protected workflows

Instant Work Office may show this policy, a privacy notice link, or a related notice near workflows that ask for legal name, birthday, Social Security number, taxpayer identification number, address, owner identity, payment settings, contractor records, customer records, or similar regulated business information.

Users should review the notice before submitting protected information. If a workflow is completed for a business, customer, contractor, owner, or other third party, the user is responsible for having the authority and consent needed to submit that information.

Login and account access

Login data

Login may use email/password or supported single sign-on providers. Instant Work Office verifies authenticated sessions before returning account data or performing protected business actions.

The login page collects the information needed to create and access an account, including full name, birthday, company name, email address, and password when the password option is used. Password handling is performed by the authentication provider.

Users are responsible for protecting login credentials, devices, browser sessions, and account access. Report suspected unauthorized access promptly through the support workflow or current production support contact.

Minors may require parent or guardian participation before using account, business, payment, proposal, tax, orcontractor workflows. Instant Work Office does not determine a person's legal capacity to enter a contract, sign a proposal, submit tax information, or operate a business.

Business Homepage data

Business Homepages and public data

Business Homepages can display business-facing information such as company name, public statements, services, contact paths, proposal or customer workflow entry points, and other content the account configures for publication.

Do not publish private customer data, payment secrets, bank details, tax identifiers, private documents, or sensitive internal notes to Business Homepages. Published Business Homepage content may be viewed by customers, prospects, search engines, and other public visitors.

Financial information

Payments, billing, and accounting data

Instant Work Office may store account-access subscription status, billing policy, proposal payment records, checkout identifiers, payment phase, payment status, balances, fees, refunds, disputes, accounting export metadata, and audit history. These records support operational accounting and workflow visibility.

Stripe is the payment provider for card collection and hosted checkout. Instant Work Office does not store full card numbers, CVV codes, or bank credentials in workspace forms. Stripe and financial institutions remain the payment and money-movement systems of record.

Payment processors, banks, card networks, and manual payment arrangements may control checkout availability, settlement timing, fees, refunds, disputes, chargebacks, verification, taxes, provider notices, and their own terms. Instant Work Office payment records and proposal summaries support workflow visibility, but they do not replace Stripe, bank, card network, or other provider records.

Tax, W-9, contractor, vendor, payment eligibility, and accounting-export information can be sensitive. These workflows are intended to be server-controlled and should only be accessed by authorized account users.

Third-party use cases

How third-party services are used

Instant Work Office uses third-party providers only where they support core product operations. Typical use cases include:

• Authentication, identity, hosting, database, and file operations through trusted cloud providers.
• Single sign-on when a user chooses a supported external account for authentication.
• Payment checkout, payment status, subscription, and payment-record workflows through trusted payment providers.
• Email delivery providers for support, review, proposal, contractor, and account workflow messages.
• Browser, network, and infrastructure services needed to serve pages, protect traffic, reduce abuse, and operate the service.

Third-party providers may process data under their own terms and privacy policies. Users should review those provider policies when using features connected to those services.

AI and web research

AI Business Planner data use

When an authorized Partner uses the AI Business Planner, Instant Work Office sends the Partner's question, approved business-profile facts, Business Setup Planner information, Business Plan Readiness Survey responses, and deterministic Business Plan Projection context to Google Vertex AI. The feature may use Google Search grounding to provide current market comparisons, pricing ranges, and industry information.

Partners must not enter customer information, payment or bank details, tax identifiers, passwords, credentials, private addresses, or other protected information. Instant Work Office does not save AI Business Planner questions or generated answers as chat history. Limited server telemetry may record technical facts such as model and prompt versions, token counts, latency, outcome, and selected guidance identity without storing the question, assembled context, or answer text.

When Google Search grounding is used, Google may retain search queries derived from the request and contextual information for up to three days for grounding-system debugging. Google processes that information under its applicable service terms and privacy commitments. Search-derived sources and suggestions may be displayed with the temporary answer so the Partner can review them.

Service providers

Cloud service providers

Instant Work Office uses trusted cloud service providers for authentication, hosting, backend processing, and data storage. Production systems are separated from development and test environments where appropriate.

Authentication providers help manage sign-in credentials and session verification. Protected records are accessed or changed only after appropriate authorization checks.

Cookies and sessions

Cookies, local storage, and session mirrors

Instant Work Office may use cookies, browser storage, session tools, and provider-managed authentication storage to keep users signed in, remember account context, support protected pages, and operate the application.

The app may temporarily display or cache limited session details in the browser. Browser-visible session information is not treated as authoritative business data and does not replace backend authorization checks or protected records.

Public Business Homepages do not load optional Google Maps or Google Translate until the visitor allows those tools. If allowed, Google may use cookies or similar browser storage under its own policies. Instant Work Office stores the visitor's Google-tools choice in that browser so the page can remember it. Declining leaves the page's core business, appointment, contact, and checkout features available, and the visitor can reopen the choice from the page's Privacy & Security section.

Instant Work Office does not currently use optional analytics, marketing pixels, ad signals, or session replay. Optional analytics, marketing pixels, ad signals, session replay, or similar tracking tools should not be enabled until the user has been given the required notice and consent choice where required by law. Sensitive pages that collect or display tax identifiers, W-9 readiness details, payment settings, proposal acceptance records, customer records, protected account data, or support/dispute records should not use marketing pixels, ad targeting signals, or session replay unless specifically reviewed and approved for that sensitive workflow.

Privacy rights

Access, correction, deletion, and sharing

Users may request access, correction, deletion, portability review, or restriction of certain personal information by using the support workflow or instantworkoffice@gmail.com. Instant Work Office will verify the request before acting on account, business, customer, contractor, payment, support, or workflow records. Some records may be retained where needed for security, fraud prevention, audit history, accounting, tax support, payment disputes, legal obligations, completed transactions, signed proposal history, or business continuity.

Instant Work Office may promote a user's business by sharing public business information, Business Homepage content, service descriptions, contact paths, and other user-approved public-facing business details with third parties and the general public. Instant Work Office does not intend to sell private account, tax, payment, protected customer, contractor, or support records. If any future activity is considered a "sale" or "sharing" under applicable privacy law, Instant Work Office will provide the required notice and opt-out path.

Privacy representatives

EU, EEA, and UK representative review

Instant Work Office does not currently assign an EU or UK privacy representative because the service is presently intended for United States availability and is not intentionally marketed to EU or UK users.

Before expanding availability to EU, EEA, or UK users, Instant Work Office should review whether GDPR, UK GDPR, EU representative, UK representative, or Data Protection Officer obligations apply.

Accessibility

Accessibility statement

Instant Work Office aims to make public pages and core application workflows accessible and usable. The target standard for new and updated public-facing pages is WCAG 2.2 AA where reasonably achievable for the current feature, technology, and workflow. Users may report accessibility barriers through the support workflow or instantworkoffice@gmail.com. Reports should include the page URL, device/browser details, assistive technology used if relevant, and a description of the barrier. Instant Work Office will review accessibility reports within 5 business days, prioritize issues that block account access or protected workflows, and respond through the available support channel.

Flagship data and security

Security approach

InstantWorkOffice.com safeguards account information, Business Homepage content, payment-related records, proposal records, customer records, workflow data, and operational history through server-owned validation, access controls, audit history, account-level settings, and operational safeguards designed to preserve confidentiality, integrity, and authorized use.

• Protected account data requires authenticated and authorized access before it is returned or changed.
• Protected backend services handle business validation, workflow transitions, payment records, and audit history.
• Production business data is handled through controlled production storage.
• Sensitive provider credentials are not intended to be exposed in browser code or public pages.
• Payment-provider confirmations are validated before related payment records or proposal payment summaries are updated.
• Audit history is used to preserve important workflow events and protected business actions.

No internet service can guarantee absolute security. Users are responsible for strong passwords, safe device access, prompt account review, and keeping private business records out of public fields.

Retention and deletion

Data retention

Instant Work Office keeps account, workflow, payment, audit, and business records as needed to provide the service, maintain security, support accounting and tax workflows, resolve disputes, comply with obligations, and preserve historical business context.

Some records may be deactivated instead of hard-deleted so that audit history, accounting records, signed proposal history, and payment records remain consistent. Users may request account or data review through support.

Policy versions

Privacy policy versions

This notice displays its effective date and privacyVersion identifier. Instant Work Office may preserve prior versions and associate the applicable privacyVersion with account, workflow, support, security, or audit history. Later use of the service is subject to the privacy notice in effect at the time of that later visit or action.

Contact

Questions and requests

For privacy, security, account-data, or privacy-rights questions, contact Instant Work Office support through the support workflow inside the application or by emailing instantworkoffice@gmail.com.

Contract, billing, refund, cancellation, acceptable-use, copyright, dispute, and legal-notice requirements are published in the Terms of Service.