Privacy Policy

Content Foundry, Inc. ("Content Foundry," "we," "us," or "our") operates Workloop, getworkloop.com, and related account, desktop, messaging, and support services. This policy explains the information involved when you use those services and the choices available to you.

Information involved in the services

Information you provide

We process information you submit to create or access an account, contact us, apply to work with us, or use a Workloop feature. Depending on the feature, this may include a phone number, passkey and session information, application answers, support messages, SMS verification messages, and messages you send or receive in an invited SMS pilot.

Local workspace and conversation data

Workloop Desktop is designed to keep workspace configuration, conversations, and related working data on the Mac where Workloop is running. Credentials and application state may also be stored locally, including in the macOS Keychain. Local does not mean that no service ever processes the content: when you ask a coworker to use a connected service or an AI provider, the information needed for that request is sent to that provider. Conversation records may retain the information returned to Workloop on your device.

Connected services and AI providers

If you connect services such as Google Gmail or Calendar, GroupMe, or an AI provider, Workloop processes account identifiers, authorization credentials, and the content needed to perform the actions you request. Some connections are accessed directly by Workloop Desktop. A hosted account service may store encrypted provider credentials when needed to provision a connection to Desktop. The connected provider's own privacy policy and terms also apply to its processing.

Website and service activity

On the production Workloop website, we may use PostHog to measure page views and download interactions. We configure that analytics without automatic interaction capture or session recording. Desktop update checks may report the release channel, application version and build, and a daily identifier derived from the network address and user agent; the raw network address and user agent are not included in the PostHog event. Our hosting and communications providers may also process ordinary request and delivery information needed to serve pages, send account codes, route messages, or deliver email.

How we use information

We use information to:

• provide, authenticate, maintain, and troubleshoot the services;
• carry out the actions you request through connected services;
• route messages and replies to the correct account or workspace;
• respond to applications, questions, and support requests;
• protect accounts, enforce limits, and prevent misuse; and
• understand and improve how our website and services are used.

When information is provided to others

We provide information to service providers when they need it to operate a feature—for example, Surge for phone verification and SMS, PostHog for configured website analytics, Resend for application email, infrastructure providers that host our services, and the connected services or AI providers you choose. We may also disclose information when you direct us to, when required by law, or in connection with a business transaction subject to appropriate protections.

We do not share mobile opt-in information or SMS consent with third parties for their own marketing, lead generation, or affiliate marketing. We may provide phone and messaging information to vendors that help us deliver account verification messages or operate an invited SMS pilot.

SMS privacy and choices

Workloop uses SMS to send account verification messages. People invited to a pre-release SMS pilot may also send a first message to consent to automated responses about their work requests and follow-up questions. For the pilot, we may process and retain phone numbers, message content, delivery details, timestamps, and consent or opt-out records to provide the service, maintain the conversation, and honor messaging choices. Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help. Consent is not a condition of purchase. For other assistance, email support@getworkloop.com.

Retention and deletion

Retention varies with the information, the feature, and our operational or legal needs. We keep information only as long as reasonably needed for those purposes. Information stored locally remains under the control of the device and workspace owner. Disconnecting a provider stops future access by Workloop but may not delete information already included in local conversations or records kept by the provider. You may contact us about hosted account or communications information using the details below.

Security

We use administrative and technical measures intended to protect information, including limiting the information sent to a service to what is needed for the requested feature. No storage or transmission method can be guaranteed completely secure.

Your choices and rights

You can disconnect connected services, stop using Workloop, manage local data on your device, or opt out of SMS as described above. Depending on where you live, applicable law may give you additional rights regarding personal information. Contact us to make a request. We may need to verify your identity before acting on it.

Changes to this policy

We may update this policy as the services change. We will post the updated policy here and change the effective date.

Contact us

Questions or privacy requests may be sent to support@getworkloop.com or by mail to: