00Security
Security, by default.
Worcia collects only what it needs, keeps it for as long as it needs, encrypts it in transit and in files and backups, gives every team member two-factor sign-in, and logs who did what. Here is exactly how, and how to report a problem.
01What we handle
What we handle
- Website inquiries
- What you send us through a form, the calculators or the newsletter: name, email, company, phone if given, and your answers. Stored in Worcia HQ, our CRM.
- Analytics
- Self-hosted and cookieless: page views and events, with no personal profiles and no third-party trackers.
- Server logs
- Our web server keeps standard access logs, including IP addresses, for 14 days to keep the site secure, then deletes them.
- Demo conversations
- If you talk to our demo agent, the transcript (and audio, when voice is live) is kept so we can review quality and stop abuse.
- Client systems
- When we build for you, your customers' data (calls, messages, CRM records) lives in your systems or in infrastructure agreed in your contract, processed under our Data Processing Addendum.
02Which AI providers process what
Which AI providers process what
- This website
- No AI provider processes visitor data on this site today. Ask Worcia and Automation Sketch answer with automated responses built from this site's own content, on our own server. The voice demo is a prerecorded script read aloud by your own browser. Anthropic (Claude API) is named on the Subprocessors page before any AI provider is switched on.
- Client systems
- Providers are chosen per engagement and named in your contract. We use API terms under which your data is not used to train the provider's models, and we tell you if a provider's terms ever change that.
- Human oversight
- Agents work inside limits you approve, keep a person in the loop, and hand off to a person when the conversation needs one.
03How long we keep it
How long we keep it
- Inquiries and leads
- Up to 24 months after our last contact with you, then deleted, unless you become a client (then the contract decides).
- Demo transcripts and audio
- 30 days, then deleted.
- Backups
- Encrypted nightly backups kept for up to 90 days.
- On request
- Ask us to access, correct or delete your data at any time: hello@worcia.com.
04Encryption
Encryption
- In transit
- Everything is served over HTTPS with HSTS. Internal services listen only on the server's loopback interface.
- Files
- Files you upload to Worcia Console are encrypted with AES-256-GCM before they are written to disk, and served only through signed, access-checked links.
- Backups
- Database and file backups are encrypted with GPG (AES-256) before they leave the server.
- Secrets
- Two-factor secrets are stored encrypted. Passwords are hashed with Argon2id, never stored.
05Access control
Access control
- Team
- Every Worcia HQ account requires a password and a time-based one-time code (TOTP). Sessions expire after two hours idle and twelve hours in total.
- Clients
- Worcia Console uses separate accounts from our team's, and each client sees only their own projects and files. Sessions end after eight hours idle and seven days in total.
- Least privilege
- The application's database account can read and write data but cannot change the database structure. Repeated failed sign-ins lock an account for 15 minutes.
- Audit trail
- Sign-ins, changes to leads, content and settings, and file access are written to an audit log.
06Report an issue
Found a security problem? Tell us.
Email hello@worcia.com with “Security” in the subject. We acknowledge within one business day and keep you updated until it’s fixed.
Please don’t access data that isn’t yours, degrade the service or publish details before we’ve had a reasonable chance to fix the issue. Machine-readable contact details are in security.txt. See also the Privacy Policy, DPA and Subprocessors.
Let's build the system your business runs on.
A free 30-minute Growth Call. You leave knowing where your revenue leaks and what it would take to fix it.