Your information

Privacy Policy

How we handle information when you use WorkKit Online.

Effective date: November 2, 2026

WorkKit Online is operated under the WorkKit Online brand by Tharanga Sri Jayasinghe, an independent sole proprietor. This notice describes personal information handled through the WorkKit Online website, free tools and account-based business software. Questions and privacy requests may be submitted through our Contact page.

Information we process

We process information you provide when registering (such as name, email and authentication credentials), managing a business profile, creating customers, invoices, quotations and other records, or contacting support. Business documents may contain personal information about your customers that you choose to enter.

We also process technical and security information needed to run the service, such as IP address, request information, session data and operational logs. Subscription status, billing identifiers and payment-related metadata may be received from our payment provider. Payment card details are handled through the payment provider's checkout, not entered into WorkKit Online forms.

Why we use information

We use this information to operate accounts, generate and store business documents, provide subscriptions and support, prevent misuse, secure the service, troubleshoot errors and comply with applicable obligations. Where required by law, we rely on an appropriate legal basis, including contract performance, legitimate interests, legal obligations or consent.

Service providers and disclosures

We may share information with service providers to the extent needed to deliver the service, including website hosting, email and payment services. Paddle provides subscription checkout and billing services; Google reCAPTCHA may be used to protect public forms against abuse. Their respective privacy notices apply to their services. We may also disclose information where legally required or to protect the service and its users.

Storage, access and security

We apply reasonable technical and organizational safeguards. Account access is controlled through authentication. No internet service can guarantee absolute security. Data may be processed by providers outside your country, subject to applicable legal safeguards where required.

Retention

We retain information while it is needed to operate your account, fulfill contractual and legal obligations, resolve disputes and protect the service. Retention may vary by record type and applicable requirements. We do not promise that deleted records disappear instantly from backups or legally required records.

Your choices and rights

You may update information available in your account and request access, correction, deletion or other rights available under applicable law using our Contact page. Some information may need to be retained for legal, accounting or security reasons. You are responsible for notices and permissions needed when entering other people's information in your business documents.

Cookies and security tools

We use session cookies and similar technology for login, security and core functionality. External anti-abuse tools may process device or request information to detect automated activity.

Changes

We may update this policy and publish the revised effective date. Material changes will be communicated when required by law.

See our Terms of Service and Refund Policy.