PRIVACY POLICY

Effective Date: March 3, 2026

This Privacy Policy (“Policy”) describes how WORKSHARE LLC, a New Hampshire limited liability company with its principal place of business in Laconia, New Hampshire (“WORKSHARE,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, processes, and protects information in connection with the Suprata software platform and related services (collectively, the “Platform”).

This Policy forms part of the contractual relationship between WORKSHARE and its customers and applies to all access to and use of the Platform.

1. Scope and Applicability

Suprata is a business-to-business software-as-a-service platform. The Platform is intended solely for commercial and organizational use.

This Policy applies to:

• Business customers who subscribe to the Platform (“Customers”)

• Authorized users designated by Customers (“Authorized Users”)

• Website visitors

• Individuals communicating with us for support or business purposes

The Platform is not intended for use by minors.

2. Data Control and Processing Roles

WORKSHARE’s role varies depending on the category of data involved.

2.1 Account and Administrative Data

For information related to Customer accounts, billing, system administration, and Company operations (“Account Data”), WORKSHARE acts as the data controller.

2.2 Customer-Provided Platform Data

For information uploaded to, stored within, or processed through the Platform by Customers, including but not limited to CRM records, customer information, invoices, job records, operational data, communications, uploaded documents, asset information, telemetry, mapping data, and related materials (“Customer Data”), WORKSHARE acts as a service provider processing data on behalf of the Customer.

Customers determine the categories of Customer Data entered into the Platform and are responsible for ensuring they have lawful authority to process such data.

3. Categories of Information Collected

3.1 Account Data

We may collect and process:

• Business name

• Contact names

• Email addresses

• Phone numbers

• Billing information

• Login credentials

• Authentication data

• Account configuration settings

• Communications with WORKSHARE

3.2 Customer Data

Depending on Customer configuration and usage, the Platform may process:

• Contact and CRM records

• Invoices and transaction records

• Operational job and service data

• Uploaded files and media

• Internal notes and communications

• Equipment, vessel, asset, and mapping data

• Telemetry and operational metrics

• Optional AI-generated content

• Voice inputs and transcriptions (if enabled)

WORKSHARE processes Customer Data solely to provide the Platform and related services.

3.3 Payment Data

Suprata does not store full credit card numbers.

Payment transactions are processed exclusively by third-party PCI-compliant payment processors. WORKSHARE may receive limited transaction metadata necessary for billing and reconciliation purposes.

3.4 Technical and Usage Data

We may collect:

• IP addresses

• Device and browser information

• Access timestamps

• Session data

• Log files

• Performance metrics

• Usage analytics

• Cookie data

This information is used to maintain system integrity, security, and service performance.

4. AI-Enabled Features

The Platform may include optional AI-powered capabilities.

When enabled by the Customer:

• Limited data may be transmitted securely via API to third-party AI providers.

• Data transmitted through AI features is used strictly for inference and feature functionality.

• Such data is not used to train large language models.

• AI providers do not retain Customer Data for model training purposes.

• AI features may be disabled upon Customer request.

Where applicable, AI systems operate using retrieval-based techniques designed to limit scope and exposure of Customer Data.

Customers retain control over activation and use of AI functionality.

5. Purposes of Processing

WORKSHARE processes information to:

• Provide, operate, and maintain the Platform

• Authenticate and authorize users

• Process payments

• Provide customer support

• Improve system performance and reliability

• Develop new features

• Enforce contractual rights

• Comply with legal obligations

• Prevent fraud, misuse, or security threats

We do not sell Customer Data or personal information.

6. Support Access and Account Access Controls

WORKSHARE does not access Customer accounts for support purposes without authorization.

Support access:

• Requires explicit Customer permission

• Is limited to the scope necessary to resolve the identified issue

• Is performed only by authorized personnel

• Is subject to internal access controls

WORKSHARE does not use Customer Data accessed during support for unrelated purposes.

7. Disclosure of Information and Subprocessors

WORKSHARE may engage third-party service providers (“Subprocessors”) to support operation of the Platform. Categories of Subprocessors may include:

• Cloud hosting and infrastructure providers

• Storage and data center providers

• Payment processors

• Communication and messaging providers

• Accounting and financial integration services

• AI service providers

• Analytics and monitoring services

Subprocessors are contractually obligated to maintain appropriate confidentiality and security safeguards.

WORKSHARE may update Subprocessors as operational requirements evolve.

Customer Data may also be disclosed:

• If required by law or valid legal process

• To protect rights, property, or safety

• In connection with a merger, acquisition, or corporate restructuring

8. Third-Party Integrations

Customers may elect to integrate Suprata with third-party services.

When integrations are activated:

• Data may be transmitted to the selected third-party service

• That service’s privacy practices will apply to data received

• Customers are responsible for evaluating and managing third-party integrations

9. Data Security

WORKSHARE implements commercially reasonable administrative, technical, and physical safeguards designed to protect information, including:

• Encryption in transit via HTTPS/TLS

• Access controls and authentication mechanisms

• Role-based permission structures

• Restricted support access

• US-based hosting infrastructure

No method of transmission or storage is entirely secure; however, WORKSHARE maintains security practices appropriate to the nature of the Platform.

10. Data Retention and Deletion

10.1 Active Accounts

Customer Data is retained while the account remains active and as necessary to provide services.

10.2 Account Termination

Upon account termination:

• Customer Data is retained for up to sixty (60) days to allow account reactivation.

• Customers may request deletion prior to expiration of this period.

• After the retention window, Customer Data is permanently deleted, subject to standard backup cycles and legal requirements.

Most Customer Data may be exported using built-in Platform tools; however, full system backups are not provided as a standalone feature.

11. Customer Responsibilities

Customers are responsible for:

• Ensuring lawful authority to upload and process Customer Data

• Managing user permissions within their organization

• Responding to data subject requests relating to Customer Data

• Maintaining confidentiality of login credentials

WORKSHARE processes Customer Data in accordance with Customer instructions as reflected in Platform configuration and usage.

12. Data Subject and Access Requests

Customers may submit requests regarding Account Data or deletion of Customer Data by contacting:

[email protected]

Requests will be verified prior to action.

WORKSHARE will cooperate with Customers in responding to reasonable data-related inquiries concerning Account Data under its control.

13. Business Transfers

In the event of a merger, acquisition, asset sale, financing transaction, or restructuring, information governed by this Policy may be transferred as part of that transaction, subject to continued confidentiality protections.

14. Limitation of Liability

Nothing in this Policy creates obligations beyond those established in the applicable Customer agreement. WORKSHARE’s liability relating to data protection is governed by the terms of the applicable service agreement.

15. Updates to This Policy

WORKSHARE may update this Policy periodically. The revised version will be posted with an updated Effective Date.

Continued use of the Platform after publication of changes constitutes acceptance of the revised Policy.

16. Contact Information

WORKSHARE LLC
Laconia, New Hampshire
Email: [email protected]

For privacy-related inquiries, please contact us at the email above.