Privacy Policy

1. Who this covers

This policy explains how Worker Bee Wellness LLC("Worker Bee", "we", "us") handles personal information on this website and platform. It covers two groups of people, because we collect quite different things about each:

• Corporate clients — the businesses that book events, and the people at those businesses who arrange them.
• Therapists ("TheraBees") — the licensed massage therapists who apply to take work through the platform.

We also receive limited information about employees who take part in a session — see section 4.

2. What we collect from clients

• Account details: your name, work email address, phone number, and a password (stored only as a secure one-way hash — we never see or store your actual password).
• Company details: company name, phone number, billing preferences and any notes we keep about your account.
• Locations: the street address, city, state and ZIP of each office we come to, and the approximate map coordinates we derive from that address so we can route therapists to it.
• Booking details: dates, times, expected headcount, session length, the number of therapists, any access or parking notes you give us, and an on-site contact name, email and phone for the day.
• Billing records: invoices, amounts, payment status, promo codes used, and any tips added. Card and bank account numbers are handled by Stripe and are never stored on our systems.

3. What we collect from therapists

Therapists are vetted before they can take work, so this is necessarily more than we collect from clients.

• Identity and contact details: legal name, display name, email address, phone number, and the city, state and ZIP you work from (with approximate coordinates, used to match you to nearby jobs).
• Profile information: your biography, headshot, specialties, service radius and availability.
• Verification documents: government-issued ID, massage licence, proof of professional liability insurance, a completed W-9, your signed Independent Contractor Agreement, and background-check authorisation where applicable.
• Work and payment records: jobs offered, accepted, declined and completed; your payout percentage and earnings; reliability history; and client reviews.

Verification documents are stored in access-controlled cloud file storage and are visible only to Worker Bee administrators — never to clients, and never to other therapists.

4. Employees who receive a session

We deliberately collect very little about the people who actually sit in the chair. We do not ask for their names, contact details or health records, and the platform has nowhere to store them. Anything an employee tells a therapist about their health is shared with that therapist so the session can be performed safely, and is not recorded in the platform by us.

5. Information collected automatically

• A session cookie when you sign in. It holds a random token, not your personal details, and it is httpOnly — meaning scripts in the browser cannot read it.
• Standard server and security logs kept by our hosting provider, such as IP address and browser type, used to keep the Service running and to investigate abuse.
• An audit log of significant actions taken in the platform — for example who confirmed or cancelled a booking, and when.

We do not use advertising cookies, and we do not sell personal information or share it for cross-context behavioural advertising.

6. Why we use it

• To take and confirm bookings, and to work out the staffing an event needs.
• To dispatch therapists — which means sharing the site address and on-site contact with the therapists assigned to that job.
• To raise and collect invoices, and to pay therapists.
• To verify that a therapist is licensed and insured before they attend a workplace.
• To send transactional messages: booking confirmations, job offers, cancellations, reschedules, invoices, password resets and email verification.
• To keep the Service secure, prevent fraud and abuse, and meet our legal, tax and accounting obligations.

We do not send marketing email through the platform, and we do not build advertising profiles.

7. Who we share it with

We share personal information with the service providers we need to run the platform, and only for that purpose. They process it on our instructions and are not permitted to use it for their own purposes.

• Stripe — payment processing, and therapist payouts through Stripe Connect. Stripe receives the billing contact and invoice details, and handles card and bank (ACH) payments directly. Card numbers never reach our systems. What Stripe receives about a therapist who sets up payouts, and what we get back, is section 9.
• Twilio— text messages to therapists about job offers. Twilio receives the therapist's phone number and the message.
• Resend — transactional email delivery.
• Vercel — website and application hosting.
• Neon — the managed database where platform records are stored.
• Cloudflare R2 (or equivalent S3-compatible storage) — storage for therapist verification documents.
• Mapbox — converting an address into map coordinates so jobs can be routed.
• Clients and therapists, of each other — a client sees the name and profile of therapists assigned to their event; an assigned therapist sees the site address and the on-site contact for that event. Neither sees anything more than the job requires.

We may also disclose information where required by law, to enforce our agreements, to protect someone's safety, or as part of a merger or sale of the business — in which case we will tell you.

8. How long we keep it

We keep account, booking and payment records for as long as the account is active and afterwards for as long as we need them for tax, accounting, insurance and legal purposes — typically several years. Therapist verification documents are kept for the duration of the contracting relationship and the period afterwards that our obligations require. Session records are short-lived and expire on their own.

When we no longer need information we delete it or keep it only in a form that no longer identifies anyone. Note that some records — particularly issued invoices — cannot simply be erased, because we are required to retain them.

9. Stripe Connect and Therapist Payouts

Worker Bee uses Stripe Connect to support therapist payout onboarding, identity and tax verification, payment routing, payout administration, and tax-form delivery. When a therapist elects to set up payouts, Worker Bee may provide Stripe with information needed to create and administer the therapist's connected account, including the therapist's name, business name, email address, telephone number, address, payout amounts, transaction information, and account identifiers.

Stripe may collect, verify, and process additional information directly from the therapist, including bank-account information, identity-verification information, and tax information. Worker Bee does not intend to collect or store full bank-account numbers, Social Security numbers, taxpayer-identification numbers, or identity-verification documents when Stripe's onboarding flow collects those data directly.

Worker Bee receives and uses limited Stripe account and payout-status information, such as connected-account identifiers, onboarding status, payout eligibility, payment records, transfer and payout identifiers, failed-payment information, and tax-form delivery status where available. Worker Bee uses this information to administer therapist payments, prevent fraud, maintain financial and tax records, resolve disputes, comply with law, and support users.

Stripe processes personal information under its own applicable agreements and privacy policy. Worker Bee's sharing and use of information is also subject to this Privacy Policy. Stripe may use service providers and process information in locations outside a therapist's state or country, as described in Stripe's terms and privacy notices.

Worker Bee may use Stripe Connect tax-reporting services or another provider to help prepare, file, and deliver legally required tax forms. Therapists remain responsible for reporting their taxable income and paying taxes due.

This section is also published on its own at Stripe Connect and therapist payouts, with its version number, for therapists who need to cite it.

10. Security

• Passwords are stored only as salted one-way hashes; we cannot recover or read them.
• Traffic to the site is encrypted in transit (HTTPS), and data is encrypted at rest by our hosting and storage providers.
• Sign-in uses an httpOnly session cookie, and administrative screens are restricted to Worker Bee staff accounts.
• Verification documents are held in access-controlled storage rather than served publicly.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you as required by law.

11. Your choices and rights

You can review and update most of your details by signing in. Beyond that, and depending on where you live, you may have the right to request a copy of the personal information we hold about you, ask us to correct or delete it, ask us to limit how we use it, or appeal a decision we make about such a request.

Residents of California and of other states with comprehensive privacy laws have specific rights, including the right not to be discriminated against for exercising them. We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of on that front.

To make a request, email info@workerbee.life. We may need to verify your identity first, and we will respond within the time the applicable law allows. [Placeholder — confirm which state privacy laws apply to your markets, and the exact response deadlines, with counsel.]

12. Children

The Service is for businesses and working adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

13. Where your information is handled

Worker Bee operates in the United States, and the providers listed above process information in the United States. If you access the Service from elsewhere, you understand your information will be handled in the United States, where privacy laws may differ from those where you live.

14. Changes to this policy

We may update this policy. When we do, we will change the effective date at the top of this page, and for material changes we will make reasonable efforts to tell you directly.

15. Contact

Worker Bee Wellness LLC, State of Arizona — info@workerbee.life. See also our Terms of Service.