Privacy Policy

This page explains what data WorkHive collects, how we use it, and your rights as a user. Plain language; no dark patterns.

What we collect

WorkHive collects only the data needed to operate the platform:

• Email address when you sign up for early access or create an account.
• Account profile (display name, role, hive membership) you provide during sign-up.
• Operational data you enter in your hive: logbook entries, PM completions, asset records, skill matrix entries, voice journal recordings, fault notes.
• Technical metadata: time stamps, IP address (for security audit), browser type, page views.

We do not collect government IDs, card or bank credentials, location data, or any data not needed to make WorkHive work. WorkHive does not process payments: no money moves through the platform.

One exception, and it is worth naming. The Marketplace lets a service provider buy service credits and settle a job, and those payments happen in GCash between people, outside WorkHive. When one does, we record what is needed to verify it: the amount, the method, and the GCash reference number you file. That is the only payment-related data on the platform, it exists so a top-up or a settlement can be checked against what actually arrived, and none of it is a card, an account number or a banking credential. Using the Marketplace is optional; every maintenance tool on WorkHive is free and records nothing of the kind.

How we use it

• To create your account and scope your access to the hives you have joined.
• To deliver the platform features (Logbook, PM Scheduler, Inventory, Skill Matrix, AI Assistant, etc.).
• To send transactional emails (account confirmation, password reset, hive invitations).
• To improve the platform through aggregated, anonymized usage analytics.

We never sell your data. We never use your operational data for advertising. We never share your hive data with another hive without your explicit consent.

AI Work Assistant and your data

The AI Work Assistant operates on your hive data to answer your questions. Inputs and outputs are scoped to your hive. We use third-party AI providers (large language model services) under contracts that prohibit them from training their general models on your plant data. Voice recordings used by the Voice Journal feature are not stored at all: the audio is transcribed and immediately discarded, and only the text transcript is saved to your account.

Data sharing

We share data only with:

• Members of your hive: per the role-based access controls you and your supervisor set up.
• Service providers (Supabase for database, AI providers for the assistant, email delivery providers) under contracts that bind them to confidentiality.
• Law enforcement when legally compelled by valid Philippine subpoena or court order.

Your rights under the Philippine Data Privacy Act

You have the right to:

• Access your personal data on the platform.
• Export your data in a portable format.
• Correct inaccurate data.
• Delete your account and all associated personal data.
• Object to specific uses of your data.
• File a complaint with the National Privacy Commission if you believe your rights have been violated.

To exercise any of these rights, email admin@workhiveph.com with the subject line "Data Rights Request".

Cookies and analytics

WorkHive uses essential cookies (session, authentication) and Google Analytics 4 on our public pages to understand aggregate usage: page views and engagement events such as viewing or submitting the signup form. Analytics is configured with IP anonymization, and we do not send names, emails, phone numbers, or any of your work records to it. We do not run third-party advertising cookies. Inside the signed-in app, usage events are recorded in our own database (not sent to Google) and are covered by the sections above.

Data retention

Account and hive data are retained as long as your account is active. After account deletion, personal data is purged within 30 days; aggregated anonymous statistics may be retained indefinitely. Compliance records (DOLE OSHS, ISO audit logs) are retained per WorkHive's audit-log policy of 10 years for general records and 15 years for incident investigations, even after individual account deletion, in compliance with regulatory requirements.

Changes to this policy

Material changes to this Privacy Policy will be announced on the platform and at workhiveph.com/learn/ at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Email admin@workhiveph.com for any privacy question. The data controller is WorkHive Engineering Services (DTI Business Name 8080496), operated by Ian Lumayno Beronio.