Privacy Policy

Last updated: April 2026

What we collect

Workstep collects your email address and name when you create an account. We store documents you upload, queries you submit, and associated audit logs. All data is stored in Cloudflare R2 and D1 infrastructure.

How we use it

Your documents are used solely to answer queries within your workspace. They are never used to train AI models, never shared with other organisations, and never transmitted beyond the active query context.

Data residency

All data is processed and stored on Cloudflare's global edge network. Workstep is operated from Palmerston North, New Zealand. We do not use third-party storage providers.

Retention and deletion

Workspace owners can delete documents, members, and workspaces at any time. Deletion permanently purges all associated data including document chunks and audit logs.

Contact

Privacy questions: [email protected]