Privacy Policy

Last Updated: October 19, 2026

1. Overview

At Workstak, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit workstak.co, explore Workstak Labs products (such as Perch), submit a Workstak Runtime operational inquiry, apply to The Foundry, or subscribe to the Alpha Work newsletter.

This policy is designed to comply with applicable data protection laws, including the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

2. Data We Collect

We collect only the information you voluntarily provide to us or that is necessary to operate and secure the Platform:

  • The Foundry Waitlist & Application Data: When you join The Foundry waitlist, unlock Foundry Foundations, or submit a community application, we collect your email address and any optional application details you provide (such as your full name, LinkedIn or website URL, current business stage, and what you are building).
  • Workstak Runtime Inquiry Data: When you request a Systems Audit or submit a Runtime inquiry, we collect your name, work email address, company name, website URL, team size, current software stack, and description of your operational bottlenecks.
  • Newsletter & Product Waitlist Data: When you join a Workstak Labs product waitlist (such as Perch), we collect your email address and waitlist status. Alpha Work newsletter signups are handled by Substack: the email you enter is passed to Substack’s subscribe page, and Substack stores your subscription and sends the newsletter.
  • Contact Form & Rate-Limit Data: When you send a message via our Contact page, we collect your name, email address, inquiry category, and message content. To prevent automated spam without storing raw IP addresses, we compute a one-way cryptographic hash (SHA-256) of your IP address to enforce hourly submission limits.
  • Local-First Software (Perch): Workstak Labs desktop software such as Perch is designed around local-first principles, storing your notes and tasks locally on your device rather than harvesting workspace content on our servers.

3. Cookies, Local Storage & Analytics

We use lightweight cookies, browser local storage, and privacy-conscious analytics to understand how visitors use the Platform and to maintain session convenience:

  • Portal State: We use browser local storage to remember if you have already unlocked access to educational resources such as Foundry Foundations on your device.
  • Analytics: We use Vercel Analytics and PostHog to measure aggregate traffic, page views, and site performance. You can restrict cookies or tracking scripts at any time through your browser settings or content blockers.

4. How We Use Your Data

We use the information we collect strictly to:

  • Review and respond to Workstak Runtime consulting and audit inquiries.
  • Evaluate applications for The Foundry and grant access to Foundry Foundations and community cohorts.
  • Deliver editions of the Alpha Work newsletter and product updates you have requested.
  • Respond to general contact inquiries and protect our forms against spam and abuse.
  • Maintain, secure, and improve the performance of our website and software products.

5. Data Sharing & Infrastructure Providers

We never sell or rent your personal data. We share data only with trusted infrastructure sub-processors necessary to deliver our services:

  • Database & Hosting: Supabase (managed PostgreSQL database with Row-Level Security) and Vercel (web application hosting and edge network).
  • Communications & Newsletter: Loops (transactional inquiry notifications) and Substack, which handles Alpha Work newsletter subscriptions and sends the newsletter emails. When you subscribe, you do so on Substack and your subscription is governed by Substack’s privacy policy.
  • Analytics: PostHog and Vercel Analytics for aggregate product telemetry.
  • Legal Compliance: Where disclosure is required by applicable law, regulation, or valid legal process.

6. International Data Transfers & Security

Workstak is headquartered in Sydney, Australia, and utilizes cloud infrastructure located in the Asia-Pacific region and the United States. Where personal data is transferred across borders, we rely on reputable providers that maintain industry-standard security certifications (such as SOC 2 Type II) and appropriate contractual safeguards.

7. Your Privacy Rights & Contact

Depending on your jurisdiction, you have the right to request access to, correction of, or deletion of the personal information we hold about you, or to unsubscribe from marketing communications at any time (via the unsubscribe link in any newsletter email or by contacting us directly).

Privacy Inquiries & Complaints: To exercise your data rights or submit a privacy inquiry or complaint (including under the Australian Privacy Principles), please contact us at hello@workstak.co. We will respond within 30 days. If you reside in Australia and are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.