Privacy Policy

Last updated: March 26, 2026

Workspace by Skillbase ("Workspace", "we", "us") operates the workspace.skillbase.space platform. This Privacy Policy describes how we collect, use, and protect your personal information when you use our service.

1. Information We Collect

Account Information

When you sign in via Google OAuth, we receive and store your name, email address, and profile picture. We do not receive or store your Google password.

Company and Team Data

You create companies and configure AI teams within the platform. This includes team names, descriptions, persona configurations, custom instructions, environment variables, and TEAM.md content. Environment variable values are stored encrypted at rest.

Usage Data

We track AI model usage (tokens consumed, models used, session durations) and infrastructure compute time for billing purposes. This data is associated with your company account.

Payment Information

Payments are processed by Stripe. We do not store credit card numbers or payment method details. We store Stripe session IDs and payment amounts for billing records.

Telegram Data

If you connect a Telegram bot, messages sent to your bot are processed by your AI team in an isolated container. We do not store Telegram message content on our servers beyond the runtime of your team container. Your Telegram bot token is stored as an encrypted environment variable.

2. How We Use Your Information

  • To provide and operate the Workspace platform
  • To authenticate your identity and manage your session
  • To process payments and maintain billing records
  • To route AI model requests on your behalf
  • To calculate and display usage costs
  • To deploy and manage your team containers

3. Data Sharing

We share your data only with the following third-party services:

  • Google — for OAuth authentication
  • Stripe — for payment processing
  • AI model providers — for inference (your prompts and agent messages are sent to third-party AI model providers such as Anthropic, OpenAI, Google, and Meta)
  • Cloud infrastructure providers — for container hosting (your team configuration and environment variables are deployed to isolated compute instances)
  • Skillbase Registry — for persona and skill metadata (no personal data is sent)

We do not sell your personal information. We do not share your data with third parties for advertising purposes.

4. Data Storage and Security

Your data is stored in a PostgreSQL database. Each team runs in an isolated container with dedicated resources. We use HTTPS for all communications. Session tokens are stored as secure, HTTP-only cookies.

5. Data Retention

  • Account data is retained while your account is active.
  • Usage and billing records are retained for 12 months for accounting purposes.
  • When you delete a company, associated teams and data are soft-deleted and permanently removed after 30 days.
  • Telegram messages are processed in real-time within your container and are not persisted by our platform.

6. Your Rights

You can:

  • Access your account data through the dashboard
  • Delete your companies and teams at any time
  • Request a full export or deletion of your personal data by contacting us

7. Cookies

We use a single session cookie (authjs.session-token) for authentication. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. AI Model Data Processing

When your AI agents process messages, prompts and responses are sent to third-party AI model providers (such as Anthropic, OpenAI, Google, Meta) via third-party APIs. Each provider has its own data processing policies. We recommend reviewing the privacy policies of the AI model providers you choose to use.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page.

10. Contact

For privacy-related questions, contact us at privacy@skillbase.space.