Security & Privacy

How WorkMemoir keeps your career record private — in plain language.

Who can see my entries?

WorkMemoir does not publish your content or create a public profile. When you explicitly choose Share Your Work, it can generate a privacy-generalized social-post draft for you to review and copy. Nothing is posted automatically.

Can my employer see my memoir?

No. There is no employer dashboard, team workspace, or organization access. Your account belongs to you alone, and no third party — including an employer — can see what you’ve captured.

Where is my data stored?

In a Supabase database (PostgreSQL), with encryption in transit (TLS) and at rest. Authentication is handled by Supabase Auth with your email and password.

How is AI used?

When you generate an output (a review, 1:1 agenda, STAR answer, or distillation), we send only the relevant entry text to OpenAI to produce that result. We also use embeddings to power semantic search across your own memoir.

Do you train models on my data?

No. Your career data isn’t used to train OpenAI models, and we never sell your data.

Who are your subprocessors?

Supabase — database and authentication.
OpenAI — AI generation, transcription, and embeddings.
Resend — transactional email (contact replies and optional reminders).
PostHog & Google Analytics — aggregate usage statistics (never career content).
Vercel — hosting and content delivery.
Upstash Redis — rate limiting.
Hostinger — mailbox for contact-form notifications.
Razorpay — payment processing (we never store your card number).

See the full subprocessor registry.

Can I export my data?

Yes. From Settings you can export your entire memoir as JSON or Markdown — no email to us required.

Can I delete my data?

Yes. From Settings you can delete your account, which removes your profile, entries, and derived data from our active databases.

Third-party integrations?

WorkMemoir connects only to the tools you explicitly connect from Settings. Each connection imports work items into your private Evidence Inbox as candidates; nothing becomes a memoir entry until you approve it.

Slack — installed through Slack OAuth with four bot permissions: receive /memo slash commands, post reminder and digest messages, send direct messages, and read the installing user’s basic profile. It does not read your channel or direct-message history.
GitHub — connected with a personal access token you create. WorkMemoir reads the merged pull requests and closed issues you authored, so they can become inbox candidates.
Linear — connected with a personal API key. WorkMemoir reads the issues assigned to you that were completed.

AI assistants (MCP): you can connect ChatGPT, Claude, Gemini or another MCP client from your assistant. It receives only the memoir excerpts, goals and context its tool calls ask for, within the scopes you approve, and it cannot write to your memoir. Requests are user-initiated, we do not receive your chat transcript, and every connection can be disconnected in Settings → Connected assistants.

Not currently available: WorkMemoir does not connect to your email or calendar account. There is no inbox, mailbox, calendar or meeting-recording access. To capture an email, forward it manually to your private WorkMemoir inbox.

You can disconnect Slack, GitHub or Linear — or any connected AI assistant — from Settings at any time. Tool imports run once a day; disconnecting an assistant takes effect on its next request.

For the full legal details, see our Privacy Policy. Questions? info@workmemoir.com.