Privacy notice

Version 2026-09-07. Save this exact document

Effective September 7, 2026. Version 2026-09-07.

Who operates WorkShutter

Ryan Guthrie, an individual based in Texas, United States, operates WorkShutter. Contact ryanguthrie@zoho.com for privacy questions, access, correction, deletion, marketing withdrawal, complaints or other rights requests. WorkShutter is not a separate LLC.

This notice covers the website, trial applications, accounts, communications and service security. For a business's project records, the business ordinarily determines why information is collected and we process it on its instructions. Contact that business about its records; we can help route a request. We assess our role by the actual activity. Reading this notice is not blanket consent to all processing.

Information we handle

Trial applicants provide their name, work email, company, team size and optional use case. We record choices, submission time and agreement evidence to review requests and communicate about access. Product-update emails are optional and separate from necessary service messages.

Accounts involve identifiers, email, membership, roles, invitations, authentication/session information and service activity. Workspace records may include project names, customer names, addresses, appointment details, notes, categories, tags, comments, optional coordinates, uploaded photos/videos and private project PDFs. Files may contain audio, faces, property details, capture times, location metadata or other personal information.

Mobile capture and import request camera, microphone and photo-library/file permissions as needed. Optional foreground location can help find nearby projects. Choosing to use a location for a project saves coordinates with the project. Device location services may process an address when geocoding it. Manual project selection remains available without location permission. Device permission does not establish permission from people recorded. Pending mobile uploads use app-private device storage; files not uploaded are not yet available in the cloud. Device unlock uses operating-system authentication; WorkShutter does not receive the operating system's biometric template.

We process operational identifiers, access events, usage milestones and network information for reliability and abuse prevention. Trial rate limiting uses short-lived keyed hashes; raw IP addresses are not stored in trial application records. Infrastructure providers may process IP addresses and technical logs to deliver and protect their services. We do not use customer media or project descriptions for marketing measurement.

Purposes and legal bases

We use information to provide accounts and workspaces, review applications, communicate about service, follow customer instructions, secure the service, investigate problems and meet legal obligations. Where a legal basis is required for our own processing, we rely on contract performance for an individual contracting customer; legitimate interests in providing and securing business services for organization contacts and employees; consent where required for optional marketing; and legal obligation where applicable. We balance legitimate interests against individual rights. Customer organizations determine the basis for collecting and using their project records.

Recipients and sharing

Authorized workspace members can access information according to their permissions. Assignment alone does not create a confidential project boundary. Customer-authorized integrations receive information within their scopes and may retain exports separately.

External galleries expose selected media, the gallery title and current category labels to anyone holding an active link. Original files may contain GPS metadata and audio. Recipients can save or forward copies. Revocation cannot retrieve copies already saved. Private project PDFs are not included in external photo/video galleries.

Cloudflare provides API, network and object-storage infrastructure; Neon provides the database; Vercel provides website/app delivery and the API proxy; Resend delivers sign-in, invitation and service emails. Zoho Mail handles correspondence sent to our published contact address. Avoid emailing passwords or unnecessary sensitive files. These providers receive information needed for their respective services. Customer-selected integrations are separate recipients selected by Customer.

Ordinary customer-content support access requires a workspace-authorized grant. Restricted access may also be necessary for security incidents, legal requirements and service protection. Professional advisers, authorities when legally required, or a lawful business successor may receive necessary information with appropriate protections. We do not sell customer content, use it in advertising, or train general-purpose AI models on it. The current service does not use customer records for targeted advertising or make solely automated decisions with legal or similarly significant effects about people.

International processing

The operator is based in the United States and providers may process information in other countries. We do not promise UK-only or EU-only hosting. Where data-protection law requires a transfer mechanism, assessment or representative, those arrangements must be established for the relevant processing. The data processing agreement is not itself an international-transfer mechanism or certification. New customer activation remains subject to applicable regional readiness checks; contact us before using the service for processing that requires additional arrangements.

Retention and deletion

Pending, unapproved trial applications older than 90 days are removed by scheduled cleanup. Trial rate-limit records expire and are cleaned up by the scheduled service. Marketing withdrawals can be sent to ryanguthrie@zoho.com; we may retain the minimum suppression information needed to honor them.

Workspace records remain while needed for the customer service and the organization's instructions. Moving supported records to trash starts the service's 30-day trash process; permanent removal follows the applicable authorization and cleanup workflow. Trial expiration alone does not delete content. Ask us to coordinate export and closure before abandoning a workspace. An employee's account deletion does not automatically delete business records that the organization controls.

We retain necessary agreement evidence, security records and correspondence for their relevant operational, legal-obligation or claims purposes, reviewing the need rather than retaining them indefinitely by default. Provider retention and any lawful hold can affect when every copy is removed. We will explain relevant scope and exceptions when handling a request and will not claim that all copies have been erased unless verified. Restored records remain subject to valid deletion instructions. No fixed backup-expiry or recovery-time guarantee is made in this notice.

Your choices and rights

Contact ryanguthrie@zoho.com to request access, correction, deletion, restriction or portability, object to applicable processing, withdraw marketing consent, or raise a complaint. Depending on your jurisdiction and the processing, some or all of these rights apply. Withdrawal does not make earlier lawful processing unlawful. We will reasonably verify authority and identity, minimize information requested for verification, and respond within applicable legal deadlines. Where Customer controls the records, we will refer or assist the request as appropriate. We do not penalize you for exercising applicable rights.

You can also complain to the relevant data-protection authority, including the UK Information Commissioner's Office or an EU supervisory authority where applicable. If a request cannot be fulfilled, we will explain the relevant reason and available review or appeal route required by law.

Cookies, children and updates

The marketing site does not currently use advertising cookies or third-party analytics scripts. The application uses necessary authentication cookies and local storage for functions such as the selected workspace and preferences. Mobile permissions can be managed through device settings. Browser or device controls may affect available functionality.

WorkShutter is a business service for adults, not a children's product. Do not create accounts for children or intentionally use it to collect sensitive regulated records without a separate approved arrangement. Incidental capture can still occur; contact the responsible business or us about inappropriate records.

We will date material updates to this notice, provide notice where required, and seek consent where a new use requires it. A changed notice does not silently authorize incompatible new uses of previously collected information.