What we see,
and what we never do.

The one commitment everything else follows from

Worktype never observes, logs, or transmits what you type into AI tools. The browser extension has no ability to read any page: it requests no content scripts, no tab access, no clipboard reading, and no browsing history. You can confirm this yourself from the extension's permissions on its store listing or in your browser's extension settings; it is enforced by what the software is allowed to do, not by a promise about how we use an ability we hold.

Worktype records exactly two things, and both are explicit acts: a prompt you choose to save, and a copy you choose to make.

What Worktype holds

• Account details. Your name and work email, provided when your organization invited you or when you signed in. Authentication is handled by Clerk; Worktype never sees or stores your password.
• Prompts. The ones you save, with their titles, bodies, and variables. They belong to your organization's workspace and never leave it.
• Usage records. When a prompt is copied or viewed, Worktype records who, what, and when, along with the kind of work the copy was counted under. These records are the product: they are how your organization proves a way of working has spread.
• Organization settings. Kinds of work, practices, memberships, roles, invitations, and authentication configuration, managed by your organization's administrators.

Tenancy

Every piece of data belongs to exactly one organization. There are no cross-organization reads, searches, or exports; prompts frequently contain internal context, and isolation between customers is treated as a correctness requirement of the software, not a filter applied on the way out.

Who processes it

Worktype runs on a small set of infrastructure providers, each processing data only to provide the service:

• Clerk for sign-in and single sign-on.
• Neon for the database (PostgreSQL, hosted in the United States).
• Fly.io for application hosting.
• Resend for the one kind of email Worktype sends: invitations.

Nobody else. Worktype does not sell data, does not share it with advertisers, does not use it to train AI models, and runs no third-party analytics or advertising scripts inside the product.

Retention

Worktype is an evidence product, so records of use are kept: usage records are immutable, and prompts and settings are archived rather than destroyed when removed, because silently rewriting history is exactly what the product exists to prevent. When an organization leaves Worktype, its workspace and everything in it is deleted on request.

Your rights

Worktype is used through organizations, and your organization is the controller of its workspace. Requests about your data, including access and deletion, go first to your organization's administrator; where the law gives you rights directly against us, we honor them. Write to privacy@worktype.co for anything this page does not answer, including this page being wrong.

Changes

If this policy changes in a way that matters, the date above changes with it and the change is listed on the changelog like any other shipped work.