Privacy notice
Your work stays yours.
A clear view of what ClientWorkSystem needs, why it needs it, and the choices you have.
Last updated: 27 October 2026
Social account data deletion
Open Settings, Socials and disconnect a direct account. Removal automatically deletes its connection details, credentials, matching pending account selections, and account-linked publishing and analytics records from the live service. No email request is needed.
Account deletion scope
Only the selected account and its verified aliases are removed. Other accounts and workspaces are unaffected. Removing all direct accounts leaves no connected direct-account records or account-linked publishing history in the live service.
Preventing stale account restores
We keep a minimal account identifier and deletion marker to prevent older background jobs from restoring removed data. It contains no access tokens, profile names, posts or analytics. Reconnecting requires fresh authorisation for that account.
Your work after account removal
Workspace drafts and uploaded files remain. Posts already on the social platform remain there. Publishing already in progress may still complete. Historical backups and service records are handled separately, as explained below.
Direct YouTube connection
When you choose Connect YouTube, Google asks for your permission. The current direct connection uses read-only access to identify your authorised channel and show its name for selection in your workspace. It does not request permission to upload, edit or delete YouTube videos.
Google Business Profile
When you connect Google Business Profile, you approve business.manage access to discover businesses you own or manage, publish reviewed posts, read reviews and send replies you explicitly approve. We store selected business IDs and names, connection status and encrypted OAuth credentials.
Business reviews and posts
Reviews are retrieved on demand and are not cached in our database. Choose a review to prepare a post, then check the quote and any personal details before publishing. Google receives approved posts and replies, and Cloudflare processes the network traffic. Review responses are never sent automatically.
Google connection records
We store the selected channel ID and title, permission scopes, connection status and expiry details, plus OAuth access and refresh tokens when supplied. These records let you recognise, manage and renew your selected connection. Your Google password is not collected by this connection.
Protection of Google data
Requests to Google use HTTPS. Access and refresh tokens are encrypted before database storage. Connection management requires authenticated access to the appropriate workspace. OAuth approval and channel selection are tied to the initiating browser. Stored OAuth tokens are not returned as account display information.
Google data recipients
Google and YouTube process authorisation and channel lookup requests. Your authorised workspace users can see the selected channel name and connection status. Authorised LPV personnel may access connection records for service delivery, security or support under the access limits described below.
Cloudflare network processing
Cloudflare processes web traffic, including OAuth callback traffic and channel information returned to your browser, to deliver and protect ClientWorkSystem. Google connection information is processed for this network service, subject to the service-provider access limits described below.
Historical Google data copies
Automatic removal applies to the live service. Historical backups and service records are separate; the current backup process has no automatic remote-deletion deadline. Contact [email protected] about retained copies. We assess those copies and justified retention requirements. We do not promise immediate deletion from every historical copy.
Google data and backups
Where whole-database backups use HighLevel or LeadConnector, those providers receive database copies containing channel information and encrypted OAuth tokens for backup and recovery. The encryption of tokens does not mean that all other database information is encrypted.
Disconnecting Google
Disconnect automatically deletes the selected channel’s live-service data. We revoke Google permission before completing removal unless another connected Google service may share the grant. If Google cannot confirm revocation, removal shows an error so you can retry.
Shared Google permission
When another connected Google service may share permission, we delete only the selected channel’s local data to protect the other connection. You can also revoke ClientWorkSystem access in your Google account; this may affect other channels using that permission.
Google data retention
Removal deletes connection records and matching pending selection credentials from the live service. Authorisation state expires after ten minutes; other pending selections may stay valid for seven days. Expiry alone does not delete historical copies. Email [email protected] for other deletion requests or questions about retained copies.
What we handle
We handle your private workspace sign-in, plans, scripts, messages, and the photos, video, or audio you choose to add or record.
Your free demo
For a free demo, we use your website and email to prepare and deliver the result. Your name and phone are optional. We send a text message only when you choose SMS delivery. Marketing permission is separate and optional.
Why we use it
We use this information to open, secure, run, and support your ClientWorkSystem workspace. We do not sell personal information or use it to track you across other companies’ apps or websites.
Device permissions
Camera and microphone access are used only when you record. Media access is used only when you choose a file. Notifications are optional and can be changed in system settings.
Saved sign-in
A sign-in is saved only when you choose to stay signed in. Mac uses Keychain. iPhone uses secure system storage. You can clear the saved sign-in from the app.
Storage and recovery
Valid work may stay on your device while an upload is incomplete. This protects recordings during a weak connection, restart, or power loss. Uploaded work stays only as long as needed for the service, support, legal duties, and agreed records.
Who helps us run CWS
Trusted service providers may help us host, secure, deliver, analyse, or support ClientWorkSystem. They may use information only to provide the contracted service and must protect it to the same or an equivalent standard.
Managers and team access
Your organisation may invite owners, managers, employees, or contractors and give them access to one or more business workspaces. Their role controls what they can see or change. Your organisation is responsible for choosing suitable access, reviewing it, and removing it when it is no longer needed.
LPV support access
Authorised LPV staff may access a workspace or connected CRM when needed to provide the service, resolve a support request, protect the service, restore access, or follow your documented instructions. Access is limited to authorised work and must not be used for unrelated purposes.
HighLevel and LeadConnector
HighLevel and LeadConnector provide connected CRM, social, media, scheduling, and publishing services. Authorised agency administrators may access more than one customer sub-account or enter a user view without that user’s password when needed for approved support, security, configuration, or service delivery.
OpenAI and Anthropic
When you choose AI, prompts, captions, scripts, business context, and selected media may be sent to OpenAI for the requested result. Anthropic Claude is only a backup. iPhone and Mac ask before the first transfer. Decline or withdraw permission in iPhone Settings or ClientWorkSystem > AI Processing on Mac. Passwords and payment details are not sent.
Your choices
You can decline optional permissions. Depending on where you live, you may ask to access, correct, delete, restrict, or export your information, or object to some uses.
Contact us
Email [email protected] for a privacy request or a clear answer about your information. We may need to confirm your identity before changing private workspace data.
Who is responsible
LPV GLOBAL LTD
Company number 15998720
52 High Street, Pinner, England, HA5 5PW
[email protected]