Workbench
Workbench

Privacy policy

Last updated: October 3, 2026

Workbench is a product of Eastlink LLC, which is the company behind it and the controller of the data described here. Workbench is an assistant that a business connects to its own email, calendar, files, Facebook Page and chat apps. It sorts incoming messages, drafts replies for the business owner to approve, keeps a record of the business's customers, suppliers and bills, and can run a small online store for the business. Each business has its own separate installation and database.

What data Workbench uses

  • Google (Gmail, Google Calendar, Google Drive):the messages, events and files of the account the business connects, to sort them, draft replies, find bills and answer the owner's questions. Workbench also sends email from that account: replies the owner approved, and notes and questions from the assistant to the business's own staff.
  • Facebook:for a Page the business connects, the Page's name and ID and an encrypted access token; posts, comments and messages on the Page and on the Page's own posts in a group it manages, with the name and Facebook ID of the person who wrote them; and the private replies the business sends from Workbench.
  • Telegram and text messages (SMS):when the owner or a staff member links their own Telegram account or phone number, the messages they exchange with the assistant, their Telegram user ID or phone number, and their voice notes (turned into text; the audio is not kept). The business's Telegram bot token is stored encrypted. If someone who is not on the team writes to the business's bot, Workbench keeps only their Telegram ID and the time, not what they wrote.
  • Voice:when a person asks the assistant to read something aloud or talks with it, the text and that person's voice are processed to make speech and to understand what they said. Workbench keeps the words of the talk in the chat, not the audio.
  • Store members: for people who join a store that Workbench runs for a business, the name and phone number they sign in with, the items they claim, and, when they ask for one, a text reminder for a drop (the phone number and the drop). A member who replies STOP gets no more of these texts.
  • Store visits:which store pages a visitor opened and when, with a random visitor ID from the store's cookie and, when the visitor is signed in as a member, that member. The business sees these as counts (visitors, views and claims). Visit records are deleted after 13 months.
  • What the business enters:its profile, staff, rules, notes about customers, and answers to the assistant's questions.

How it is used

  • Only to do the work for the business that connected the account: sort messages, decide who should handle them, draft replies, remember past conversations with each customer, track bills, run the store, and answer the questions of the owner and staff.
  • Nothing is sent, forwarded or posted without the rules the business set. Replies to customers are drafts until the owner approves them, unless the owner turns on automatic replies for a kind of message.
  • We do not sell data, use it for advertising, or share it with anyone except the service providers below.
  • Mobile information and text-message opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes. This includes phone numbers. Our service providers get it only to deliver the texts.

Text messages

Eastlink LLC sends text messages from Workbench to business owners and their staff who agree to get them. See our Text messages page and Terms of service for how people agree, message frequency, rates, and the HELP and STOP keywords. We do not share mobile information or text-message consent with third parties or affiliates for marketing or promotional purposes.

Service providers

Workbench uses these providers to do the work. Each gets only what it needs for its part:

  • TypeSafe (Jev): decisions about messages, such as how to sort an email or whether a reply is a yes.
  • OpenAI: drafting replies and answering the owner's questions.
  • Google Gemini: speech (reading aloud and live talk) and turning voice notes into text.
  • Supabase: the database and sign-in. Vercel: hosting.
  • Resend: sign-in emails. Twilio: text messages.
  • Telegram and Meta: delivery of messages on their own platforms, when the business connects them.

We use the AI providers under API terms that do not allow them to use this data to train their models. They may keep it for a short time only to check for abuse, as their terms say.

Google user data

Workbench's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • We use Google user data only to provide and improve the features the business uses in Workbench.
  • We transfer it to others only to provide those features (the service providers above), to comply with the law, or as part of a merger or sale with notice to the business.
  • We do not use it for advertising, and we do not sell it.
  • We do not use it to develop, improve or train generalized AI or machine learning models, and the AI providers above do not train on it. They process it only to do the business's work.
  • People on our team do not read it, except with the business's permission for a specific message, for security, or to comply with the law.

Where it is kept, and for how long

In the business's own database, in the United States unless the business asks for another region. Data is encrypted in transit, and access tokens and bot tokens are also stored encrypted. Data is kept while the business uses Workbench and the account stays connected. When a business disconnects an account, its tokens are deleted at once; when a business or a person asks us to delete data, we delete it within 30 days (see our data deletion page).

Cookies

The Workbench app uses cookies to keep people signed in (the owner and staff, and store members). A store that Workbench runs also sets one cookie with a random visitor ID, to count visits to the store. That ID holds no name, phone number or other personal data; it is not used for advertising and is not shared. It expires after 13 months. Workbench does not use advertising cookies, and no other company sets cookies through Workbench.

Your choices

  • A business can disconnect Gmail, Google or Facebook at any time in Settings; stored tokens are deleted. To remove its Telegram bot, the business can revoke the bot in Telegram's BotFather and ask us to delete the stored token.
  • A team member can unlink their Telegram at any time: in Settings, or by sending /unlink to the bot.
  • A store member who asked for drop text reminders can reply STOP at any time to stop them, and START to get them again.
  • A person who wrote to a business, or a store member, can ask that business, or us, to delete what Workbench stored about them.

Children

Workbench is for businesses and is not meant for children under 16. We do not knowingly collect their data.

This website

This site does not use cookies or tracking scripts. If you email us or book a call, we use your details only to reply to you.

Changes

If we change this policy, we update the date at the top and tell businesses that use Workbench about important changes.

Contact

Eastlink LLC. Questions or requests: adam@wecodeit.co