What happens to your data
Last updated November 9, 2026 · Questions: contact@workbird.net
What data does Workbird store?
- Your account: name, email, and a hashed password (or your Google / Microsoft identity).
- What you put in your workspace: clients, contacts, deals, tasks, notes, outreach drafts, and metrics as daily totals. We never store raw exports from other platforms.
- What the agent produces: reports, briefs, audit results and your conversations with it, plus a usage log of the action units you spend.
Where is my data stored?
- Workbird runs entirely on Cloudflare’s global network: the app, the database and document storage. Data is encrypted in transit and at rest, and traffic is protected by Cloudflare’s DDoS and security systems.
How are AI features handled?
- When you use an AI feature, only the context that task needs (for example a client’s name, notes and metrics) is processed by our AI model providers.
- They don’t store your prompts or train on them, and neither do we.
Does Workbird read my email?
- If you connect Gmail or Outlook, Workbird asks only for permission to send email, never to read your inbox.
- Emails go out from your own address, and only when you click send. Connection tokens are encrypted, and you can disconnect at any time.
What happens when I audit a page?
- When you audit a URL, we fetch that public page, its robots.txt and its llms.txt as “WorkbirdAuditBot”. We keep the results, not a copy of the page.
How is my account secured?
- Passwords are hashed (PBKDF2). Sessions use HTTP-only cookies, session and invite tokens are stored only as hashes, and mailbox connections are encrypted with AES-256.
- If you sign in with Google or Microsoft we receive your name and email (and your Google profile photo). We never see your password there.
How long is data kept, and how do I delete it?
- Delete a client, document or conversation and it is removed from our database and storage.
- Automatic cleanup: expired sessions, usage logs after about 13 months, metrics older than about 26 months, and conversations trimmed to their latest 400 messages.
- Want your whole account gone? Email support@workbird.net and we will permanently delete it.
Does Workbird track me?
- No ad pixels, no third-party analytics, no selling data. This site sets no cookies; the app sets one session cookie.
Who else processes my data?
- Cloudflare (hosting, database, storage and security), our AI model providers (processing AI requests), and Google or Microsoft only if you sign in or connect a mailbox with them. Email us for the full list.
Is Workbird certified?
- No SOC 2 or ISO 27001 yet.