Privacy

Two different sets of data

Workbench holds two kinds of information and treats them differently.

Yours. Your name, email address, business name and address, what you have subscribed to, and anything you write into the playbook. This is ours to look after and is covered by everything below.

Your customers’. The contacts, enquiries, quotes, invoices and job records you put into your workspace. That information belongs to your business, not to us. We store and process it on your behalf, and we do not use it for anything other than running your workspace.

What we collect and why

• Your email address — it is how you sign in. There is no password to lose; we email you a link instead.
• Your business details — business name, web address and trade, so your workspace and website can exist.
• Playbook answers — what you write into the free playbook is saved so you can come back to it. We read these, and we say so on the form: they tell us what small businesses actually struggle with, and we may get in touch about what you wrote.
• Billing details — handled by our payment provider. Card numbers never reach our servers and we never store them.
• Ordinary server logs — the usual record of requests, kept so we can find faults and abuse.

Where it lives

The application runs on Google Cloud in Singapore. The database is hosted by Supabase in Sydney, Australia. Payments are handled by Stripe or Square depending on what you have connected, and sign-in and notification emails go through an email delivery provider. Those providers see only what they need to do their job.

Every workspace’s data is fenced off in the database itself, not just in the application. One business cannot read another’s records even if the application asks it to.

What we do not do

• We do not sell your information, or your customers’.
• We do not run advertising trackers on your website or in your workspace.
• We do not read your customer records to build products, train models, or profile anybody.

How long we keep it

For as long as you have an account, and for a short period afterwards so an account closed by accident can be recovered. Ask us to delete it and we will — including your playbook answers, which you can ask us to remove without closing anything else.

Asking us for something

To see what we hold about you, correct it, take it elsewhere, delete it, or stop the emails, write to privacy@mywb.app. Marketing emails also carry an unsubscribe link, and unsubscribing never affects the emails you need to run your business.

Changes

If this page changes in a way that matters, we will tell account holders by email rather than quietly editing it.