Privacy policy

Summary

AllWork.ai is a workforce platform for security operations. The data we collect is what our customers' operators put into the system to schedule, dispatch, and bill — guard records, schedules, shift activity, tour scans, DARs, incidents, timesheets, payroll data, and the financial records associated with running a security company. We process it under contract with the customer; we do not sell it.

Roles

For most data on the platform, the customer is the controller and AllWork.ai is the processor. The customer determines what data flows in, who has access, and how long it stays. For our own operational records (billing, support, security telemetry), AllWork.ai is the controller.

Data we hold

• Customer-tenant data — guards, schedules, shifts, tours, DARs, incidents, timesheets, payroll, invoices, files.
• Identity data — names, work emails, phone numbers, role, IdP-issued user IDs.
• Operational telemetry — request logs, audit logs, error reports, performance metrics.
• Billing — Stripe-handled card / ACH metadata (we never see PAN).

The employee app on your phone

The Surefox employee app (App Store and Google Play, and the same app in a phone browser) is used by employees of our customers. Your employer creates your account and is the controller of what the app records; we process it for them. The app sends these things from your phone to our servers:

• Location. While the app is open it records your position every 30 seconds, on or off shift, and keeps that history; during an SOS, every 5 seconds for up to an hour. On a phone with the store app, location is also used in the background in three windows only: from 60 minutes before a scheduled shift until it ends, while you are clocked in, and while the open-shift screen is open, so arriving at or leaving your post can record your punch for you. Outside those windows nothing is monitored. Every clock in and out carries your position so the post can accept it. The app tells you this before it asks for permission, and you can turn location off in your phone's settings at any time.
• Camera and photos. The live photo for your company ID (face detection runs on the phone to frame the shot; only the photo is sent, and it is not used for face recognition) and the photos you attach to a daily activity or incident report.
• What you type or sign: reports, coverage forms, break waivers, messages to your supervisor and the operations center, time off requests, timeslip disputes, your emergency contact, your address, bank account details for direct deposit, and the employer forms you sign in the app.
• Notifications. If you turn them on, the phone's push token, so shift changes and messages can reach you.
• Crash reports. When the app hits an error it sends the error text, the page and the app version, with passwords and tokens scrubbed and without your account identifier, so we can fix it.

Nothing from the app is sold or shared with third parties for their own use; there are no ads and no analytics kit in it. To ask what is held about you or to have it deleted, ask your employer, who holds the data, or write to privacy@allwork.ai.

How long we keep it

Customer-tenant data is retained for the life of the contract + 90 days after termination, unless the customer requests earlier deletion. Audit logs are retained 7 years per the contract framework (SOC 2 + standard B2B SaaS expectation). Operational telemetry is rolled up at 90 days.

How to reach us

Privacy questions, data subject requests, or DPA requests: privacy@allwork.ai.

Full document

The full, contract-grade privacy policy is in finalization with counsel ahead of GA. Request the current draft at privacy@allwork.ai if you need it for procurement review.