← Okaypath
DocumentationPrivacyTermsSupport

Okaypath privacy policy

Last updated 2026-10-05. Okaypath (the Wix app) is made by Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. Contact: hello@greatwork.company.

Who is who

You are the owner of the Wix site where Okaypath is installed. Okaypath sends your Wix Forms submissions to the approvers you choose and records their decisions. The people who submit your forms (submitters) and your approvers are the people this data is about; Okaypath processes their data on your behalf, only to run your approvals.

What we store

  • Your site's app instance: the Wix app instance id, site id, published site address and name, and your plan status (from Wix).
  • Your settings and workflows: the notice email, the name approvers see, which updates to send back to Wix, the submitter messages, how long to keep answers, and each workflow's form, conditions, steps and approvers (names and email addresses you typed in).
  • Approval requests: for each submission sent for approval, the form's name, the Wix submission id, the submitter's contact id and email address (to label the contact, to stop anyone approving their own submission, and to email the outcome when you switch that on), the steps and who was asked, each approver's decision and comment and when they made it, reminders sent, and the outcome.
  • The submission's answers, copied when the request starts so approvers see exactly what was submitted. They are compressed and encrypted (AES-256-GCM) with a key that never leaves our server, and deleted 30, 90 or 365 days after the request closes (your choice; 90 by default).
  • The audit trail: who did what and when, with comments, kept 12 months (Standard) or 36 months (Pro) after a request closes.
  • Submissions that weren't sent (no plan at the time, or the monthly limit): the submission id and form name only, for 90 days, so you can send them later.
  • Sessions: a random token for each dashboard session, deleted after 12 hours.

What we never store or do

We don't read submissions of forms no workflow covers, and we don't read payments, orders, bookings or anything else on your site. We don't look at requests except to answer a support request you send us, we build no lists, never contact your submitters or approvers except with the emails your workflows send, and never use any of this for anything but your approvals. We set no cookies and add nothing to your live site. Approver pages set no cookies and run no scripts.

Where data goes

  • Our server in the United States (DigitalOcean, New York).
  • Wix, through its API: to read the submission and the form, and, when a request is decided, to add a label and a note to the submitter's contact, to write the approval status on the submission, and to send a Wix Automations event (what you switched on in Settings).
  • Resend (our email provider, United States) for the emails Okaypath sends: approval requests and reminders to your approvers (the form's name, the request number, the summary answers you picked and the link), notices to your notice email, and the outcome to the submitter if you switch that on. Replies go to your notice email, not to us.
  • We use no analytics or advertising networks and no other processors.

Retention and deletion

  • Answers: deleted after your setting once a request closes, at once when the submission is deleted in Wix.
  • The audit trail: 12 or 36 months after a request closes, by plan.
  • When your plan ends, approver links pause and you can open and export requests for 30 days; then every request is deleted.
  • When you uninstall Okaypath, sessions end at once and everything else is deleted 30 days later (so a reinstall by mistake loses nothing).
  • Settings > Your data deletes every request, answer and history entry for your site immediately (type DELETE to confirm), and Download what Okaypath keeps gives you the list of everything we hold about your site. A CSV export of the audit trail is a copy outside our service.
  • If a submitter or an approver asks us about their data, we answer within 30 days and check the request with you first.

Security

HTTPS everywhere. Requests from Wix are verified (signed app instances, signed webhooks). Approver links are signed, expire with the request, and can decide only once; opening one records nothing. Answers are encrypted per site and request: a copy moved to another request fails to open. The app runs as its own unprivileged user, and its web server doesn't log request addresses or links for Okaypath pages.

Changes

If this policy changes in a way that matters, we'll update the date above and tell site owners through the app.