Privacy policy

Last updated October 24, 2026

WorkStage is a private workspace for one team. Only people invited by the team's Owner or Admin can use it. This page explains what WorkStage stores, why, and who can see it.

What we store

• Your account: your name, email address, role, and a securely hashed password if you set one (never the password itself).
• Your work: to-dos, descriptions, comments, chat messages, direct messages, files you upload, and the history of changes you make.
• Notifications: what you've been notified about and whether you've read it, and, if you turn on desktop notifications, a technical address your browser gives us for delivering them.
• Sign-in: a session cookie that keeps you signed in for up to 2 days, and one-time codes or links we email you.
• Server logs: standard technical records such as IP addresses and error messages, used only to keep the service running and secure.

Signing in with Google

If you choose “Continue with Google”, Google tells us your name, your email address and that the address is verified. We use this only to sign you in to the account your team created for that email. We don't receive your Google password and we don't access your Gmail, Drive, contacts or anything else in your Google account.

Why we use it

Only to run WorkStage for your team: showing your work to the right people, sending notifications and emails you'd expect (verification codes, sign-in links, summaries of unread updates), and keeping accounts secure. We don't sell your data, show ads, or use third-party analytics or tracking.

Who can see what

• Team members can see to-dos, comments, files on to-dos and public chat channels in the workspace.
• Private channels and direct messages are visible to the people in them, and also to the workspace Admin, who can read every conversation to keep an eye on the workspace.
• The Owner and Admin can see an activity overview of what happens in the workspace, and manage who has access.

Where it's kept

All data and files are stored on the team's own server. Emails are sent through the team's own mail server. Desktop notifications pass briefly through your browser maker's push service (for example Google or Microsoft) so they can reach your device. Connections to WorkStage are encrypted (HTTPS).

How long we keep it

Your work stays in the workspace for as long as the team uses WorkStage. If you're removed from the workspace you can no longer sign in, but what you wrote stays, because it's part of the team's shared work. Database backups are kept for 14 days. To have your account or personal details deleted, contact the Owner or Admin.

Contact

Questions about this policy or your data: james@worksatge.com.