Privacy Policy

Effective September 30, 2026

This Privacy Policy explains how Tessella Technologies, LLC ("Tessella", "we", "us") collects, uses, shares and protects information when you use WorkPro and the other WorkPro Apps at workapps.app (the "Service"). By using the Service you agree to the practices described here.

1. Our Role

Organizations ("Customers") sign up for WorkPro and create workspaces, then invite their staff and, where they choose, outside people such as students or guardians. For the records a Customer keeps in its workspace — contacts, accounts, deals, tasks, notes and the like — the Customer decides what is collected and why, and we process that information on the Customer's behalf and under its instructions. If you are a contact or member of a Customer's workspace and have questions about how that Customer uses your information, please contact the Customer directly. For account, billing and usage information about the people who use the Service, we are responsible for that information as described in this policy.

2. Information We Collect

Account information. Your name, email address and profile picture, supplied by you or by the sign-in provider you use (such as Google), along with the workspaces you belong to and your role in each.

Workspace content. Whatever you and your colleagues put into the Service: records about contacts, accounts, deals, projects and tasks; notes, comments and activity; files and images; invoices, inventory, and time entries; and settings and customizations.

Google account data. If you choose to connect a Google account under Integrations, we receive the Google account's email address and OAuth tokens that let the Service act for you within the permissions you grant. See section 4.

Usage and device information. Server logs of requests to the Service, including IP address, browser type, pages requested and timestamps; an audit trail of changes made within a workspace; and error reports used to diagnose problems.

Billing information. Plan, billing contact and invoice details for the Customer's subscription. We do not store payment card numbers.

Communications. Messages you send us, such as support requests.

3. How We Use Information

• To provide, maintain and secure the Service, including authenticating you and keeping each workspace separate from every other.
• To carry out actions you ask for, such as sending invitations and verification codes, or sending an email or creating a calendar event from a connected Google account.
• To provide customer support and respond to your requests.
• To monitor, troubleshoot and improve the reliability and performance of the Service.
• To detect, prevent and respond to fraud, abuse, security incidents and violations of our Terms of Service.
• To send service-related notices, such as changes to the Service or to this policy.
• To comply with legal obligations and enforce our agreements.

We do not sell your personal information, share it for cross-context behavioral advertising, or use workspace content to serve advertising.

4. Google User Data

Connecting a Google account is optional. When you connect one, the Service requests only these permissions:

• Gmail — send email (gmail.send): to send an email you compose in WorkPro, from your Gmail address, when you press Send. The Service cannot read, search or delete messages in your mailbox.
• Google Calendar — events (calendar.events): to show your calendar events inside WorkPro and to create events you ask it to create.
• Basic profile (openid, email): to identify which Google account is connected.

We keep the OAuth tokens encrypted at rest, and when you send an email or create an event from a WorkPro record, we log it as activity on that record so your team can see it — for an email, its recipients, subject and a short preview of the text; for an event, its title, time, attendees and link. Other calendar events are read from Google when you view them and are not stored.

WorkPro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide the features described above; we do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition; we do not use it for advertising; we do not use it to train generalized artificial intelligence or machine learning models; and no person reads it unless you give us permission for a specific message, it is needed for security or to comply with law, or it has been aggregated and anonymized for internal operations.

You can disconnect at any time under Integrations, which deletes the stored tokens, or revoke access from your Google Account permissions page.

5. How We Share Information

Within your workspace. Workspace content is visible to other members of the workspace according to the roles and permissions the Customer configures.

Service providers. We use vendors who process information on our behalf and under contractual obligations to protect it, including Google Cloud and Firebase (hosting, database, file storage and sign-in) and Twilio SendGrid (delivery of system emails such as invitations and verification codes).

Legal and safety. We may disclose information if we believe in good faith that it is required by law, subpoena or other legal process, or is necessary to protect the rights, property or safety of Tessella, our users or the public.

Business transfers. If we are involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this policy.

With your direction. We share information when you or the Customer tell us to, such as when you send an email through a connected account.

6. Cookies

The Service uses a small number of cookies that are strictly necessary for it to work, such as the cookie that keeps you signed in and short-lived cookies that protect the Google connection flow. We do not use advertising or third-party tracking cookies. Your browser may also store preferences, such as your chosen theme, locally on your device.

7. Data Retention

We keep workspace content for as long as the Customer's account is active or as needed to provide the Service. Records you archive or delete may remain recoverable for a period so they can be restored. When a Customer's account is closed, we delete or de-identify its workspace content within a reasonable time, except where we must keep information to comply with law, resolve disputes or enforce our agreements. Backups are overwritten on a rolling schedule. Server and error logs are kept for a limited period for security and troubleshooting.

8. Security

We use administrative, technical and physical safeguards designed to protect information, including encryption in transit (HTTPS), encryption of stored OAuth tokens, database-level isolation between workspaces, role-based access controls, and an audit trail of changes. Access by our personnel is limited to what is needed to operate and support the Service. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Many of these you can exercise yourself within the Service — for example, by editing your profile or disconnecting a Google account. For information held in a Customer's workspace, please direct your request to that Customer; we will assist the Customer in responding. Otherwise, contact us at the address below. We will not discriminate against you for exercising these rights, and we may need to verify your identity before responding.

Residents of the European Economic Area, the United Kingdom and Switzerland may also lodge a complaint with their local data protection authority. Where we rely on a legal basis for processing, it is performance of our contract with you or the Customer, our legitimate interests in operating and securing the Service, compliance with legal obligations, or your consent (for example, when you connect a Google account).

10. International Transfers

We are based in the United States, and the Service is hosted in the United States. If you use the Service from elsewhere, your information will be transferred to, stored and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards for these transfers.

11. Children

The Service is intended for use by organizations and is not directed to children. We do not knowingly collect personal information directly from children under 13. Where a Customer, such as a school, uses the Service to manage information about students or gives students access, the Customer is responsible for obtaining any required parental consent and for directing how that information is used. If you believe a child has given us personal information without appropriate consent, please contact us and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy here and change the effective date above, and if the changes are material we will give notice through the Service or by email before they take effect.

13. Contact Us

Questions or requests about this policy or your information can be sent to Tessella Technologies, LLC at privacy@workapps.app.