Privacy Policy

1. Who is responsible

Tekin Works, the trading name of Hamza Tekin, a sole proprietor based in Istanbul, Türkiye. Contact for anything in this policy: hamza@tekinworks.com.

2. Two roles

Your account and billing details — we decide how these are used and are responsible for them. The records you put into a product (for example workers on a payroll, vendors and their certificates, participants in an ESOP census) — we process these only on your instructions, to run the product for you. You remain responsible for having the right to put them there.

3. What we collect

• Account: your company name, your email address, a salted scrypt hash of your password (never the password itself), and a SHA-256 hash of each sign-in session token.
• Billing: Paddle handles payment. We receive your email, country and subscription status from Paddle; card details are entered on Paddle’s checkout and never reach us.
• Product records: what you enter, import or upload. Prevail stores only the last four digits of a worker’s Social Security number, never the full number. Wardline reads uploaded documents once to produce findings and does not store the documents themselves; it stores the findings, the file names and page counts.
• Email: we send account and billing email only — verification, password reset, trial reminders, receipts and notices about these policies. No marketing email without your separate agreement.
• Server logs: IP address, time and requested address, kept for security and fault-finding for no longer than 30 days.
• This website: tekinworks.com uses Google Analytics to count visits. The free calculators run in your browser; what you type into them is not sent to us.

4. Why, and on what basis

To provide the product you subscribed to (contract), to take payment and keep accounting records (legal obligation), to keep the service secure (legitimate interest), and to understand which pages of this website are used (legitimate interest, or consent where your law requires it).

5. Who else processes it

• Paddle (Paddle.com Market Ltd) — reseller and payment processor.
• Contabo GmbH — the hosting company whose servers the products run on.
• Resend — delivers account and billing email.
• Google — Google Analytics on this website only, not inside the products.
• Anthropic — Wardline only, and only through the API key you supply, under your own agreement with Anthropic.

We do not sell personal data and do not share it for advertising.

6. International transfers

We operate from Türkiye and our providers operate in other countries, so your data is processed outside the country you are in. Where the law requires it, transfers rely on the safeguards our providers offer, such as standard contractual clauses.

7. How long we keep it

Product records: for as long as your account exists, or until you delete them. Account deletion on request is completed within 30 days, and backups roll off within a further 30 days. Billing records: as long as tax law requires. Server logs: no longer than 30 days.

8. Security

All traffic is encrypted with HTTPS. Passwords and session tokens are stored only as hashes. Each customer’s records are separated by account, and databases are backed up nightly.

9. Your rights

You can ask to see, correct, export or delete the personal data we hold about you, or object to how we use it. Email hamza@tekinworks.com; we answer within 30 days. If you are in the EU, the UK or Türkiye you can also complain to your data protection authority. If a worker, vendor or other person whose details you entered contacts us, we will refer them to you.

10. Cookies

Inside the products we use one strictly necessary cookie to keep you signed in. On this website, Google Analytics sets cookies to count visits.

11. Changes

If we change this policy in a way that matters, we email account holders before the change takes effect.