Privacy policy

Last updated: 25 October 2026.

Work Manager is a private, invitation-only work and task manager for a small set of product teams. It is operated by Shlomi Paz. This page explains what personal information it handles and why.

Information from Google sign-in

Work Manager asks Google only for the openid, email, and profile scopes. From your Google account it keeps your Google account identifier, your verified email address, and your display name. It uses them only to recognize you, to check that your exact email address was invited, and to show your name to your team. It does not read your mail, contacts, files, or calendar, and it cannot. It does not keep your Google ID token.

Work Manager's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Information you add

The work items, comments, ideas, decisions, and attachments you and your team create are stored so the team can do its work. They may contain names, email addresses, and order numbers of customers when a report needs them. Passwords and payment details must never be entered.

A bug report can also carry a screenshot, a screen recording, a replay of the page as it was shown to the person reporting, and a technical log of the page (errors, console messages, and device and browser details). These are captured only in a browser where a team member has switched recording on, and they show what was on that person's screen, which may include customer details. Passwords and payment details must never be shown while recording.

Information from the systems your team connects

Your team's administrators can connect other services to a brand. Each one is limited to the data its purpose needs:

• The store and its pages. A reporter script on the store sends error reports, limited to an allow-list of technical details and redacted in the browser and again on the server, so that no customer data is stored from them. A checkout pixel sends the steps and alerts a buyer meets at checkout, and never names, email addresses, phone numbers, addresses, amounts, order numbers, or payment details.
• Shopify, Google Analytics, and Microsoft Clarity. Work Manager reads visit and traffic counts and daily summaries to show how often a problem happens. It keeps a minimized copy of order records for 90 days, with no payment details.
• GitHub. Work Manager reads a brand's code repositories, with read-only access, so that an investigation can look for the cause of a bug.
• Slack. When a person reports a bug from Slack, the message they choose is analysed and turned into a work item. The original words and the analysis are erased once the report settles, and at the latest after 7 days.

Sessions and security records

A sign-in creates a session that ends after 12 hours without activity and at the latest 7 days after sign-in. Work Manager keeps an audit record of sign-ins and of changes to access and configuration for at least one year. Server logs stay on the server for 30 days; the web proxy does not log page addresses or request headers.

Where it is stored

Data is stored in a PostgreSQL database on a server in Google Cloud's me-west1 region (Tel Aviv, Israel). Encrypted backups are stored in Google Cloud Storage in the europe-west3 region (Frankfurt, Germany) and are kept for up to 400 days. Your team's administrators choose how long each kind of data is kept, such as monitoring events, recordings, and agent run logs.

AI features

Some features send parts of a work item's text, and for some features its recordings and code, to an AI model provider: Google, Anthropic, OpenAI, or Fireworks AI. Real content goes only through their paid APIs, whose terms exclude training on it. Some providers keep the requests for a limited time to detect abuse. This happens only under a written transfer authorization that names the provider, the brand, the purpose, and the kinds of content allowed. Text that looks like a password, key, or token is removed before anything is sent.

Connected apps

A person who is allowed to can connect an AI tool they use, such as Claude, ChatGPT, Codex, Cursor, Gemini, or Muse Code, to their own Work Manager access. What the tool reads through the connection is sent to the company that runs the tool (Anthropic, OpenAI, Cursor, Google, or Meta), under that person's own account and plan terms, not under Work Manager's agreements. Some plans keep, review, or train on what they receive. A connection can read only what its person may read, in the brands they chose; files and recordings are never returned, and customer details can be hidden. A person can end a connection at any time from Account settings, and the business owner can end all of them.

Sharing

Work Manager does not sell personal information, does not show advertising, and does not share personal information with anyone except the hosting, AI, and connected services named above, acting on its behalf or on the choice of the person who connects them.

Your choices

You can sign out at any time from the account menu. To correct your information, to have your access removed, or to ask what Work Manager holds about you, contact the administrator who invited you, or write to the support address shown on the Google sign-in screen. Removing access ends your sessions at once; work items you created stay with your team's records.