How Workhouse handles your data.

We collect what we need to run Workhouse: account info, the data your team enters into the product, and basic operational logs. We don't sell anything. You can export your data and delete your workspace anytime.

• → Account information. When you sign up: name, email, and a password hash. When you upload an avatar: the image you uploaded.
• → Workspace content. Everything you and your team enter into Workhouse — tasks, comments, files, attachments, status reports, audit events. This is stored on your behalf and belongs to you.
• → Operational logs. Request logs, timing, and error traces for keeping the service running. These expire after 30 days unless retained for security investigation.
• → Cookies. Authentication cookies for keeping you logged in. No third-party tracking cookies. No advertising pixels.

• → We do not sell your data.
• → We do not run advertising or share data with ad networks.
• → We do not train AI models on the contents of your workspace.
• → We do not give third parties access to your workspace content except as listed under “Sub-processors” below.

We use the following vendors to run the service. Each receives the minimum data they need to do their job.

• → Vercel — hosting, edge network, image and file storage (Vercel Blob).
• → Neon — managed Postgres database where your workspace data is stored.
• → Resend — transactional email delivery (notifications, verification, password reset).
• → Anthropic via Vercel AI Gateway — generates status-report drafts from your project activity. Anthropic's policy on the Gateway is zero data retention; inputs and outputs are not retained for training.

• → Access and export. You can export your workspace data anytime via the dashboard, or by emailing support@workhouse.app. We'll send the full export within 7 days.
• → Deletion. Delete your workspace from settings, or email us. Within 30 days, all your data is removed from primary storage; backups are aged out within 90 days.
• → Correction. You can edit any data you've entered. If you spot something we're storing that you can't correct yourself, email support@workhouse.app.
• → DPA / GDPR. Email security@workhouse.app for a data processing agreement.

Workhouse is built for businesses. We don't knowingly collect data from people under 16. If you believe a minor has signed up, email us and we'll remove the account.

We'll update the date at the top of this page whenever we change anything material. For substantive changes — new sub-processors, new categories of data collection — we'll email all workspace owners 30 days before the change takes effect.

Privacy questions: security@workhouse.app. General questions: hello@workhouse.app. See the contact page for more channels.