Workspace privacy.

This private workspace uses account details and access records to operate this private workspace, protect accounts and understand which applications are used.

We record sign-ins, failed attempts, account changes and application activity with a UTC timestamp, account/company when known, app, result, IP address, approximate country/region when available, referring hostname, campaign labels and an inferred browser/device category. We do not record passwords, invitation tokens, session tokens, form contents or full referring URLs.

Only the workspace owner can view these records. Raw IP addresses are removed after 7 days; activity records are deleted after 90 days. Account and permission records remain while access is approved. Essential session cookies last up to 8 hours and are removed on sign-out. Invitations and sign-in codes are delivered through Resend. Sign-in codes expire after ten minutes.

These records are not used for advertising or cross-site profiling. Additional analytics on public brand websites require that site’s own notice and consent controls before activation.

For access, correction or deletion requests, contact the person who invited you.