Workpad Privacy Policy
Workpad is local-first. Note content, tags, settings, and backups are stored in your browser’s IndexedDB on your device.
Workpad does not use analytics or tracking, and it does not collect browser history. Workpad AI requires a Workpad account. Notes, capture and research projects work without one, and cloud note sync is separately optional.
ChocolateMinds operates Workpad and is the data controller for optional Workpad account and subscription data. Privacy requests can be sent to ai@chocolateminds.com.
When you open the side panel or explicitly save a selection/page from the context menu, Workpad reads the active tab’s title, URL, and domain to provide the requested context. On supported Gmail and Outlook pages, Workpad does not read message content until you click Save email or deliberately use an AI page action. Saving reads only the currently opened message’s visible subject, sender, recipients, date and body; Workpad does not scan your inbox. When you open Workpad AI, it reads visible text from the active page so you can preview the AI source. Chrome internal and restricted pages are not read.
Research projects are optional. When you choose Research on a page, email or note, Workpad reads that source only then and shows you exactly what text will be stored before you add it to a project. Each source keeps a snapshot of its text (up to 50,000 characters, with the middle shortened for longer sources), its title, address and capture time. Projects, their snapshots and any decision briefs you create are stored only in your browser’s IndexedDB on this device; they are not uploaded or synced. JSON backups you export from Settings include them, and importing a backup merges them without overwriting anything already on the device. Removing a source or deleting a project removes its snapshots from this device and does not affect the original page, email or note.
Chrome may require additional page access after a tab navigates or when Workpad was not opened from its toolbar icon. In that case, Workpad asks you to grant optional access only to the current website. You can deny the request; AI page reading will remain unavailable for that site.
Workpad AI requires a signed-in Workpad account. Nothing is sent merely by opening
Workpad or Workpad AI. When you choose an AI action, Workpad sends the source you chose (selected text, page text, or the text
of a saved note you ask about), its title, a URL with its query and fragment removed, and your instruction to Workpad’s AI service,
which runs on Supabase. The service forwards that content to OpenAI’s Responses API with
store: false and a pseudonymous safety identifier derived from your account
identifier. Workpad’s AI service does not store the source text, instruction or result. To enforce
plan limits it records, per account and month, the number of AI actions, token counts and credits
used, plus short-lived request reservations and a per-minute request counter. Results are stored
only when you choose Save as note. OpenAI’s own API data controls and retention
terms apply.
Production builds may offer optional Workpad accounts. If you sign in, Supabase processes your email address, user identifier, authentication session, plan and entitlement information. Signing in alone does not upload notes.
Cloud note sync is separately opt-in. If enabled, saved note titles, content, tags, favourites, archive state, source-page details and timestamps are stored in your private Supabase account and merged across signed-in Workpad installations. Per-user database policies restrict access. Workpad keeps an offline queue and retains a conflict copy when both local and cloud versions changed. Deleted notes are replaced by content-free tombstones. Cloud notes are not end-to-end encrypted.
If you set a reminder, Workpad stores its time and note identifier in Chrome extension storage and uses Chrome alarms and notifications to alert you on that device. Clicking the notification may reopen the saved source page. Reminders are device-local and require Chrome to run at or after the scheduled time.
If you purchase a subscription, Stripe processes payment and billing information. Workpad stores only Stripe customer, subscription, price and status identifiers; it does not receive card numbers.
Workpad’s use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including Limited Use requirements. Workpad does not sell user data or use it for advertising.
Deleting extension data from Chrome or using Workpad’s reset option permanently removes local Workpad data, but does not delete an opted-in cloud copy. Turning off sync stops future transfers without deleting either copy. Choosing Delete account in Settings cancels an active subscription and permanently deletes the Supabase account, cloud notes, and associated Workpad billing records. Local notes remain until separately reset. Export a JSON backup first if you want to retain your notes.