Data & Privacy

Workestra takes data privacy seriously. This guide covers how to export your data, request deletion, and review audit logs.

GDPR Data Export

Export all data associated with your workspace for compliance or backup purposes.

What Gets Exported

The export includes:

Requesting an Export

1. Navigate to Settings > Data & Privacy
2. Click Export Data
3. Select export format:
   • Full Export — Everything in original formats
   • GDPR Package — Structured for data portability
4. Click Request Export

Export Processing

You'll receive an email when the export is ready. The download link expires after 7 days.

Data Deletion Request

Request complete deletion of your workspace data.

Types of Deletion

Requesting Workspace Deletion

1. Go to Settings > Data & Privacy
2. Scroll to Danger Zone
3. Click Delete Workspace
4. Complete the verification steps:
   • Confirm workspace name
   • Enter Owner password
   • State reason for deletion
5. Confirm

Deletion Timeline

Individual User Deletion

For GDPR "Right to be Forgotten" requests:

1. Go to Settings > Team Members
2. Find the user
3. Click Remove
4. Select Permanently Delete Data
5. Confirm

The user's personal data is anonymized or deleted within 30 days.

Data Retention Policies

Active Workspaces

Deleted/Cancelled Workspaces

Backups

• Daily backups retained for 30 days
• Backups are encrypted and geographically distributed
• Backup restoration requires support contact

Audit Log

Track all significant actions in your workspace.

Viewing the Audit Log

1. Navigate to Settings > Data & Privacy
2. Click View Audit Log
3. Use filters to narrow results

Logged Events

The audit log captures 9 event types:

Audit Log Details

Each log entry includes:

• Timestamp — When the action occurred (UTC)
• Actor — Who performed the action
• Action — What was done
• Target — What was affected
• IP Address — Where the action originated
• User Agent — Browser/device information

Filtering and Search

Filter the audit log by:

• Date range — Specific time period
• User — Actions by specific team member
• Event type — Category of action
• Resource — Specific record or module

Exporting Audit Logs

For compliance reporting:

1. Apply desired filters
2. Click Export
3. Choose format (CSV, JSON, PDF)
4. Download

Privacy Controls

Cookie Preferences

Manage cookie settings:

1. Click the cookie icon in the footer
2. Adjust preferences:
   • Essential — Required for the app to function (always on)
   • Analytics — Helps us improve the product
   • Marketing — Used for relevant communications
3. Save preferences

Do Not Track

Workestra respects browser Do Not Track settings for analytics cookies.

Data Processing Agreement

Enterprise customers can request a Data Processing Agreement (DPA):

1. Contact legal@workestra.app
2. Provide your company details
3. We'll send a signed DPA within 2 business days

GDPR Compliance

Workestra helps you comply with GDPR:

Data Processing

• Controller: Your organization (workspace Owner)
• Processor: Workestra Inc.
• Subprocessors: Listed in our DPA
• Data Location: EU (Frankfurt) by default for EU workspaces

Security Certifications

Workestra maintains the following certifications:

• SOC 2 Type II — Security and availability controls
• GDPR Compliant — European data protection
• CCPA Ready — California privacy rights

Reports available to Enterprise customers upon request.

---

Next Steps

• Security Settings — Configure 2FA and sessions
• Roles & Permissions — Control data access
• Contact: privacy@workestra.app for privacy questions