Privacy Policy

Last updated 1 October 2026

Draft template. It has not been reviewed by a lawyer and is not legal advice. Replace the bracketed parts and have it checked before you rely on it.

The Workspace is operated by [legal entity name, address] ("we"). This page explains what we store when you use it, why, and what you can do about it.

What we store

• Your Google account's name, email address and profile picture, when you sign in with Google.
• The pages, files, comments and other content you and your organisation create.
• Technical records: sign-in sessions (device and IP address), and an audit log of administrative actions.
• If your organisation connects Google Sheets: access to the spreadsheets the app creates or that you pick, and nothing else in your Google Drive.

Why

To let you sign in, show your organisation's content to its members, keep it safe, and fix problems.

Who processes it

Our hosting and service providers: Vercel (application hosting), Neon (database and file storage, United States East), Google (sign-in and, if connected, Sheets), Resend (email) and Sentry (error reports). We don't sell your data or use it for advertising.

How long

Content stays until your organisation deletes it. Deleted organisations are purged 30 days after deletion. Backups are kept for up to [30 days].

Your choices

• An organisation's owner can export or delete all of its data.
• You can delete your account from the Account page, and revoke Google access from your Google account.
• Questions or requests: [contact email].