Privacy policy
We built WorkTable to replace eight tools, not to harvest your data. This document explains what we collect, why we collect it, and the controls you have over it.
1. What we collect
We collect three categories of data:
- Account data. Your email address, name, and workspace identifiers so we can log you in and bill you.
- Workspace content. Tables, records, fields, comments, attachments, and automation definitions you create. This is your data — we treat it as confidential.
- Operational telemetry. Aggregate logs about API calls, errors, and performance so we can keep the service running. Where possible this is anonymized.
2. How we use it
We use your data to provide the service you signed up for, to send transactional emails (sign-in codes, billing receipts, usage warnings), and to investigate abuse. We do not sell your data, and we do not use your workspace content to train third-party AI models.
3. AI features
When you trigger an AI field or AI automation, the relevant row data is sent to our model provider (currently Anthropic) for inference. The provider does not retain or train on this content under our enterprise terms. AI is opt-in per field — if you never configure an AI field, no row data leaves WorkTable.
4. Sharing & sub-processors
We share data only with sub-processors we need to operate: Supabase (database hosting), Resend (transactional email), Anthropic (AI inference), and Sentry/PostHog (error and product analytics). Each is bound by a data processing agreement.
5. Security
Data is encrypted in transit (TLS) and at rest. Sessions are HttpOnly cookies signed with a rotated server secret. Passwords are never stored — we use email one-time-passcodes for sign-in.
6. Your rights
You can export every row, field, and attachment from the settings page at any time. You can delete your workspace, which permanently removes all content within thirty days. EU and UK residents have additional rights under GDPR — email us to exercise them.
7. Retention
We retain workspace content for as long as your account is active. When you delete an account, content is purged from primary storage immediately and from backups within thirty days. Operational logs are retained for ninety days.
8. Cookies
We use a single first-party cookie (wt_session) to keep you signed in. We do not use third-party advertising cookies. Analytics is collected via PostHog with IP anonymization.
9. Changes to this policy
If we make material changes, we will email account owners at least thirty days before the change takes effect. Minor clarifications may be made without notice; the “last updated” date above always reflects the current revision.
10. Contact
Questions about privacy? Email hi@useworktable.com or use the form on the contact page.