Privacy policy

The public site keeps no analytics and no visitor profiles. If you use the contact form, we use your name, email and message only to reply.

The registry stores your organization’s packages, profiles, workspaces, members, audit log, webhooks and telemetry. Telemetry events carry the command, its result and duration, CI mode and hashed workspace and organization IDs; the redaction guard rejects prompts, file contents, diffs, tokens, secrets, absolute home paths and email addresses.

The `wl` CLI sends a telemetry event after its main commands unless WORKLOOM_TELEMETRY_ENABLED is set to false; by default it sends to a local API address, not to us.

Advisory review runs only when your organization opts in. It sends the package content being reviewed to the configured AI provider (Anthropic or OpenAI), whose own terms apply to what it receives.

To ask for a copy or deletion of your data, use the contact form and choose “Privacy request”.