This policy explains the cookies and similar browser storage used on worklumi.com and app.worklumi.com, and the choices you have.
What Are Cookies?
Cookies are small values a website stores in your browser and may receive with later requests. Local storage keeps information for a website in your browser until it is removed; it does not automatically expire simply because you close a tab. Session storage normally lasts for a browser tab’s page session, although browser restoration can preserve it.
Pixels and scripts can send information such as a page address, browser details, network address or an identifier to a provider. They may transmit information even if they do not create a cookie. Server-side forwarding of those events can also involve personal information.
First-party storage relates to the WorkLumi site you are using. A third-party service can receive information through a loaded resource or an integration. A pseudonymous or hashed identifier is not necessarily anonymous information.
Cookie Categories
The worklumi.com website and the WorkLumi application use the categories below. Optional analytics run only after you accept them, and you can reject them as easily as you accept them. We do not use advertising cookies. To block automated abuse, Cloudflare Turnstile protects the contact form on worklumi.com and sign-in, sign-up and password reset in the WorkLumi application. It is a necessary security technology and may set or read its own cookies or browser storage; see Cloudflare's privacy policy.
Strictly Necessary Cookies - (Always Active)
These cookies are essential for the website to function properly. They cannot be disabled.
Session cookies for user authentication: These keep you logged into your account as you navigate from page to page. Without them, the website would forget who you are every time you click a link, forcing you to log back in constantly
Security cookies to prevent fraud: These identify potential security threats, protect user data from unauthorized access, and prevent malicious bot activity.
Cookie consent preferences: This ensures the website knows whether you chose to accept or decline optional tracking cookies on your next visit
Analytics Cookies – (Optional)
These cookies help us understand how visitors interact with our website, helping us improve our services.
Google Analytics
Vercel Traffic Analytics
Third party system integrations
User Journey analysis
Performance monitoring
Managing Your Cookie Preferences
You can manage your cookie preferences in several ways:
Cookie Banner: Use our cookie consent banner when you first visit to set your preferences.
Cookie settings: Use the “Cookie settings” link in the footer of worklumi.com to change or withdraw your choice at any time.
Browser Settings: Most browsers allow you to block or delete cookies through their settings.
Necessary storage used by the application
Necessary storage supports a feature you request, such as signing in, completing password recovery or retaining setup progress. We do not use it for advertising. Blocking it can prevent the affected function from working.
The application uses the following storage. A key ending in a user identifier is specific to that user in the browser; it does not itself authorise access to workforce records.
| Storage name and type | Purpose and information | Duration and clearing |
|---|---|---|
| ajubatech-workforce-auth - local storage | WorkLumi sign-in session managed through Supabase Auth. Contains session and associated account information needed to maintain authentication. | Persists until sign-out cleanup, application removal or browser clearing. The storage entry has no fixed browser expiry; authentication validity is controlled separately. |
| worklumi-last-business - session storage | Identifies the last selected business so the application can restore the correct business context. | Normally the tab’s page session; also removed when the application clears it, including sign-out. |
| worklumi-password-recovery - session storage | A flag indicating that a password-recovery flow is in progress. It does not contain the password. | Until recovery is cleared after the relevant flow or sign-out, or the page session ends. |
| worklumi-setup-draft followed by a user identifier - session storage | Setup draft, including organisation and business names, country, timezones and a request identifier. | Until the application clears the setup draft or the page session ends. |
| worklumi-setup-request followed by a user identifier - session storage | Request identifier used to avoid creating the same organisation twice after a retry. | Until setup cleanup or the page session ends. |
| worklumi-setup-payload followed by a user identifier - session storage | A representation of the submitted setup fields used to recognise a repeated request. | Until setup cleanup or the page session ends. |
| worklumi-invitation-token - session storage | Holds an invitation link's token while you finish accepting the invitation. | Removed when the invitation is accepted, at sign-out, or when the page session ends. |
| worklumi-cookie-consent - local storage | Records whether you accepted or rejected optional analytics on worklumi.com (the value is accepted or rejected). It holds no identifier and is not sent to us or to any provider. |
Until you change it with “Cookie settings” in the site footer or clear browser storage. It has no fixed browser expiry. |
| worklumi.theme - local storage | Remembers your light or dark display choice. | Until you change it or clear browser storage. |
| worklumi.sidebar.collapsed - local storage | Remembers whether you collapsed the side menu on a larger screen. | Until you change it or clear browser storage. |
| worklumi.mfa-invitation-dismissed - local storage | Remembers that you dismissed the suggestion to turn on two-step sign-in. | Until you clear browser storage. |
These application entries are stored for the WorkLumi origin you use. Signing out and clearing stored information are especially important on shared devices. Do not copy or send authentication-storage contents to another person.
Optional analytics advertising and embedded content
If optional technologies are introduced, the choices presented will identify the category, provider, information involved and duration. We do not send workforce records, authentication secrets, private page contents or sensitive employee information to advertising platforms.
We do not treat continued browsing, a preselected box or acceptance of the Terms as an affirmative optional-tracking choice. An employer or administrator cannot make every optional personal tracking choice for all workers.
If an external video, map or other optional embed sends information before you activate it, we will explain that and provide an appropriate choice before loading it. Necessary third-party authentication or payment functions will identify the relevant provider and its privacy information at the point of use.
Managing your choices
Where optional technologies are available, use the provided controls to accept, reject or change your choices. “Reject optional” must be as accessible as “Accept optional”, and you can withdraw your choice at any time. Withdrawal stops future optional collection through the affected technology but may not retrieve information a provider has already lawfully received.
Your choice may be stored on the browser and device where you make it. If you change browser, clear storage or use a different device, you may need to choose again. If we store a preference record, its exact key and duration will be listed in the register. We will ask again when a material new optional purpose requires a new choice.
You can also clear or block cookies and site storage in your browser settings. This can sign you out, remove setup drafts and interrupt recovery. It does not delete information already held in the WorkLumi account or employment records. In a browser that supports it, remove data for the particular WorkLumi site rather than unrelated sites.
Information sharing and overseas processing
Where browser technologies involve personal information, the WorkLumi Privacy Policy explains purposes, recipients, overseas handling, security, retention, access and correction. The provider schedule must identify the countries relevant to enabled technologies; the location of the main database does not determine all web-delivery or support processing locations.
External sites and independent services may apply their own policies when you choose to leave WorkLumi. Their independent policies do not remove our responsibilities for information that WorkLumi itself collects or discloses.
Policy Updates
We may update this Cookie Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page with a new effective date.
Contact
Questions about this policy: privacy@worklumi.com. Our Privacy Policy explains how to make an access or correction request or a complaint.