GDPR & Data Protection

Last updated: February 2026

WorkGlobal is committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

Data We Collect

We collect only what is necessary to provide our service: your country selections and work details (to generate your guide), your email (only if you opt in), and standard analytics data (page views, referral source). We do not collect sensitive personal data.

How We Use Your Data

Your country and work details are used solely to generate your personalized tax guide. If you provide your email, we use it only to send your analysis results and, if opted in, occasional tax updates. We never sell your data to third parties.

Data Storage & Security

Data is processed on servers in the United States via Vercel (our hosting provider) and transmitted securely via TLS/SSL encryption. Payment data is processed exclusively by Stripe and never touches our servers. Your country selections and work details are sent to Anthropic's Claude API to generate your tax analysis. Cached data and email subscriber information are stored using Upstash Redis. Emails are sent via Resend.

Your Rights Under GDPR

If you are in the EU/EEA, you have the right to: access your personal data, request correction or deletion, restrict processing, data portability, object to processing, withdraw consent at any time, and lodge a complaint with your local data protection supervisory authority. To exercise these rights, email us at support@workglobal.it.com.

Your Rights Under CCPA

If you are a California resident, you have the right to: know what personal information we collect, request deletion, opt out of data sales (we do not sell data), and non-discrimination for exercising your rights.

Cookies

We use essential cookies for site functionality and optional analytics cookies (Google Analytics). You can accept or decline non-essential cookies via our cookie banner. Essential cookies cannot be disabled as they are required for the site to function.

Data Retention

Free analysis inputs and results may be cached on our servers for up to 24 hours to improve performance. After that period, they are automatically deleted. Email addresses are retained until you unsubscribe. Paid report data and shared report links are retained for up to 12 months for customer support and re-access purposes, then automatically deleted. You may request earlier deletion at any time.

International Transfers

Data may be transferred to the United States for processing. We rely on Standard Contractual Clauses (SCCs) and other approved mechanisms for EU-US data transfers.

Contact Our Data Protection Team

For any data protection inquiries, contact us at support@workglobal.it.com. We will respond to all requests within 30 days as required by GDPR.