Privacy policy

Who we are

Worth Collab is made and run by A4K Corp, a corporation formed in California. In this policy, “we” and “us” mean A4K Corp.

• Privacy questions and requests: [email protected]
• Help with the app: [email protected]
• Security problems: [email protected]
• Mailing address: A4K Corp, 5015 Birch St, Newport Beach, CA 92660

What this policy covers

This policy covers:

• the Worth Collab app at app.worthcollab.app, and the emails it sends you;
• this website, worthcollab.app;
• your intake link, app.worthcollab.app/c/<your handle>, where brands can send you an offer through a form.

It also covers people whose information reaches us through a creator who uses Worth Collab: anyone who emails them, people they write to, and anyone who uses their intake link.

Worth Collab is for creators in the United States who are 18 or older. The terms cover everything else about using it.

What we collect, by source

Your account and sign-in

• Your email address, and your name if you give it. You sign in with a link we email you, or with Google.
• If you sign in with Google: your name, email address and profile picture from your Google account. Sign-in asks Google for nothing else and doesn’t give us access to your Gmail.
• For each signed-in session: your IP address, your browser and device type, and when it expires.
• To stop floods of sign-in emails, we count sign-in requests from each IP address and to each email address. We keep only scrambled (hashed) forms of both, and delete the counts within two days.
• Your workspace: its name and web address, your display name, your TikTok handle if you add it, your time zone, your follower count if you add it, and your email settings.
• People you invite: their email address, the role you give them, and who invited them. We email the invitation to them.

Your Gmail connection

When you connect Gmail, Worth Collab asks Google for one permission, gmail.modify, which Google shows as “Read, compose, and send emails from your Gmail account”. It also allows labeling mail and moving it to the trash. Worth Collab uses it only to read, to send, and, if you turn them on, to add its labels and mark offers read. It never moves mail to the trash.

Worth Collab can change your mailbox in two ways, both off until you turn them on in Settings → Comes in → Gmail. It puts one Worth Collab label on each offer thread (New offer, Asked for terms, Pursuing, Sample, Later or Declined) and moves it when the offer moves in the app. And when anyone in your workspace, you included, opens an offer in the app or decides on it, it marks that offer’s unread emails read in Gmail, once each: an email you mark unread again stays unread. Turning labels off lets you remove the labels it added. It never deletes your mail or moves it to the trash.

We store:

• your Gmail address, and the access tokens Google gives us, which we encrypt, and which member of your workspace connected it and when;
• each message we import: sender, recipients, subject, text, the HTML version, all headers and Gmail’s full copy of the message. For attachments we keep only the file name, type and size. When you open an attachment, we fetch that file from Gmail, pass it to your browser and keep no copy;
• what we make from your mail: deals, events, TAP links, sample tracking numbers, brand history and reply drafts.
• if you turn on labels or marking offers read: which Worth Collab label each thread has, and when each email was marked read, so the same change isn’t made twice.

Which mail we import:

• When you connect: the last 30 days, or 7 or 15 days if you pick that before connecting. This first import skips Gmail’s Promotions, Social and Updates tabs. It then looks through the same period again, in every tab, for event invitations (subjects with words like “webinar” or “RSVP”), and through your spam for brand offers (emails with words like “collab”, “sponsored” or “UGC”).
• After that, every 2 minutes: every new message you receive or send, in every tab. That includes personal mail, receipts and other services’ sign-in codes. We don’t filter these out. In spam, we read only emails with those offer words and replies in conversations we already have.
• From spam: we keep only offers, deal updates and replies on deals you already have. Anything else is hidden and treated like other mail that isn’t part of a deal. We never send an automatic reply to an email that was in spam.
• Never: drafts, trash, the rest of your spam, or the emails Worth Collab sends you, like sign-in links and digests. If you move a message out of spam or trash, we read it then, like a new message.
• If an email you receive or forward to us contains a Worth Collab sign-in link anyway, we remove the link’s code before the email is stored, and before any email reaches Claude.
• You can change how far back the import reads (7, 15 or 30 days) in Settings → Comes in → Gmail. Saving it imports again; nothing already imported is removed.
• When you press “Fill this in from your sent emails”, we read your sent mail from the period you pick (6 months, 1 year or 2 years) and send Claude up to 80 of the emails you sent to brands. We don’t store those emails. We keep the suggestions, which can quote a few words from them.
• Only if you ask us: we can import mail you sent further back, up to 2 years, so brand history can see how fast brands replied to you. We can also import a mailbox export you download from Google and send us. Either is stored like the rest of your mail.
• Mail from senders you block is still imported and stored. From the moment you block a sender, their mail is hidden everywhere in the app and isn’t sent to Claude.

Your forwarding address

Your workspace has its own forwarding address, starting with “deals-”. Mail sent or forwarded there reaches us through Resend, our email provider. We store it the same way as Gmail mail: sender, recipients, subject, text, the HTML version, headers, and each attachment’s name, type and size, not the file.

Pasted DMs

When you paste a DM on the Paste a DM page, we store what you enter: the brand, the contact’s name and email address, a product link and the message, plus which member pasted it.

Your intake link, and brand contacts

Anyone with your intake link can send you an offer. The form collects the brand name, the contact’s name and email address, a product link and a message. We also store the sender’s browser type and the time. The app doesn’t store the sender’s IP address. To stop floods of offers, it counts offers from each IP address, keeping only a scrambled (hashed) form, and deletes the counts within two days. Our host’s request logs record the address (see Server logs and analytics events). The offer goes into your workspace like an email and is read by Claude, up to a daily number of offers per workspace; offers past it wait in Review unread.

If you’re a brand contact: your name, email address and what you wrote reach us when you email a creator who uses Worth Collab, when they write to you, or when you use their intake link. We use them only to run Worth Collab for that creator. You can ask us about them, or ask us to delete them, at [email protected].

Your rate card and settings

What you type in: your floor, minimum fee and commission, price ladder, spark code and usage-rights fees, voice notes, reply rules, notes about brands, blocked senders and email settings. When a reply is drafted, your rate card and voice notes go to Claude with your display name and, if you typed one in, your TikTok handle, so the draft can give a brand your handle when it asks. When you press Improve on your voice notes, your display name and notes go to Claude and you see a rewrite. Nothing is saved until you press Save.

Access requests

The form on this site’s homepage asks for your name, your email address, the range your monthly sales fall in and, if you like, your TikTok handle. It’s sent to the Worth Collab app and stored there with your browser type and a scrambled (hashed) form of your IP address. To stop floods of requests, the app also counts requests from each IP address and each email address, keeping only scrambled forms of both, and deletes the counts within two days. We send ourselves an email with your name and TikTok handle, through Resend, so we know a request came in. If we invite you, we email you a sign-in link.

If the range you pick is $25,000 a month or more, the page after the form shows a calendar to book a demo call. The calendar is Calendly’s own page, shown inside ours. Loading it tells Calendly your IP address and browser details, as visiting any site does, and Calendly may set its own cookies there, under the cookie notice it shows. We don’t pass Calendly anything you typed in our form. Booking is up to you; what you type into the calendar goes to Calendly and to us.

We use your request only to decide who to invite, who to offer a demo call and to contact you about it. If you sign up, we keep it until your account is deleted. If you don’t, we delete it after 12 months. A request to delete your data includes it.

Server logs and analytics events

• Our host, Railway, logs each request to the app and to this site: IP address, browser type, the page asked for and the time.
• The app logs what its background jobs do, mostly as ids and counts. When something fails, the error record can include part of the data being handled, such as a brand name or message text.
• We keep a log of every request to Claude: what was sent, the answer, the model, and the cost and time it took. For “Fill this in from your sent emails” we log only how many emails were sent, not the emails.
• We keep each request to FastMoss and its answer.
• There are no analytics: not in your browser, not in the app, and not on this site.
• The booking calendar some people see after asking for access is the exception: it is Calendly’s page inside ours, and Calendly measures how it is used and sets cookies there under its own notice. We don’t.

Cookies

The app uses four cookies, all needed to sign you in and connect Gmail:

• Cookie

  __Secure-better-auth.session_token

  What it does

  Keeps you signed in.

  How long it lasts

  7 days from when you sign in, whether or not you use the app. Removed when you sign out.

• Cookie

  __Secure-better-auth.state

  What it does

  Protects Google sign-in from forged requests.

  How long it lasts

  5 minutes.

• Cookie

  __Host-worthcollab_sign_in_next

  What it does

  Remembers which page to open after you sign in with an emailed link, on the browser that asked for it.

  How long it lasts

  15 minutes. Removed when you sign in.

• Cookie

  __Host-worthcollab_gmail_nonce

  What it does

  Ties the steps of connecting Gmail to your browser.

  How long it lasts

  10 minutes. Removed when Google sends you back.

The app has no advertising or analytics cookies, so there’s no cookie banner. After an update, it may keep one short note in your browser tab to stop a page reloading in a loop. This site, worthcollab.app, sets no cookies. It loads one thing from another company: the booking calendar on the page after a request, for creators offered a demo call. That calendar is Calendly’s page, and Calendly may set its own cookies there and shows its own cookie notice.

One thing in the app loads from outside: product pictures in Offers come straight from the image host named in the market data, usually TikTok’s. That host sees your IP address and browser type.

How we use your Gmail data

Worth Collab reads every new message that arrives in or leaves your Gmail. Our rules sort what they can. Any message you receive that the rules can’t sort goes to Anthropic’s Claude to check whether it’s an offer, an invitation or something else. Messages you send are never sorted by Claude.

This is everything we use your Gmail data for:

• Gmail data

  Every message you receive or send: sender, recipients, subject, text, the HTML version, headers and Gmail’s full copy

  What it’s used for

  Showing you the original email. Sorting mail into Offers, Unsorted, Promos, Invitations and TAP Links: our rules go first, and Claude reads any received message they can’t sort.

  How long we keep it

  If it’s part of a deal, an event or a TAP link: until your account is deleted. Other mail: the text is deleted 30 days after the mail arrived, and the rest of the record (sender, subject, date) after 180 days.

• Gmail data

  Offer emails

  What it’s used for

  Claude reads the terms into a deal: brand, product, fee, commission, sample, deadlines and contact. You see the deal in Offers, on the deal page, in Deals and on Today.

  How long we keep it

  The deal: until your account is deleted.

• Gmail data

  Which message replies to which, and who sent it

  What it’s used for

  Keeping a conversation on one deal. Noticing when a brand replies, or hasn’t answered your question.

  How long we keep it

  Stored with each message.

• Gmail data

  Event invitations

  What it’s used for

  The Events page, calendar downloads and invitation alerts.

  How long we keep it

  The event: until your account is deleted.

• Gmail data

  TikTok affiliate (TAP) link emails

  What it’s used for

  The TAP Links page: which brand each link belongs to.

  How long we keep it

  The link: until your account is deleted.

• Gmail data

  Shipping emails

  What it’s used for

  Tracking numbers for the samples on your deals.

  How long we keep it

  With the deal.

• Gmail data

  Your mail with each brand, both directions

  What it’s used for

  Brand history: how fast a brand replies, whether it went quiet, whether the sample shipped. It feeds the risk part of an offer’s score.

  How long we keep it

  Until your account is deleted.

• Gmail data

  Brand and product names from offers

  What it’s used for

  Looking up shop and product sales figures at FastMoss, for an offer’s expected earnings per video.

  How long we keep it

  In a shared lookup table with nothing that links it to you. It stays after your account is deleted.

• Gmail data

  The last five messages of a thread, yours and theirs

  What it’s used for

  Replies drafted by Claude with your rate card and voice notes, and sending the replies you choose from your Gmail.

  How long we keep it

  Drafts, including ones you discard: until your account is deleted.

• Gmail data

  Emails you sent to brands, read only when you press “Fill this in from your sent emails”

  What it’s used for

  Suggested rate card values and voice notes.

  How long we keep it

  The emails aren’t stored. A suggestion can quote a few words from one.

• Gmail data

  Offer summaries and event details

  What it’s used for

  The daily digest and the invitation alerts we send you.

  How long we keep it

  Resend, which sends them, keeps them for 30 days.

• Gmail data

  Your Gmail address and each message’s Gmail labels

  What it’s used for

  Showing which mailbox is connected. Telling mail you sent from mail you received. Skipping drafts and trash, and spam that isn’t an offer.

  How long we keep it

  The address: until you disconnect. Labels: stored with each message.

• Gmail data

  Which deal each email thread belongs to, and when you opened or decided on an offer

  What it’s used for

  Only if you turn them on in Settings → Comes in → Gmail: putting a Worth Collab label on offer threads in Gmail and moving it when the offer moves, and marking an offer’s unread emails read in Gmail.

  How long we keep it

  Which label a thread has: until you disconnect Gmail. When an email was marked read: stored with the email.

• Gmail data

  Everything sent to Claude, and its answers

  What it’s used for

  Our log of AI requests: checking and fixing how mail was read, and tracking what each request costs. We may also send a logged request to Claude again, to check that a change to how mail is read works, only with your written agreement.

  How long we keep it

  What was sent and the answer are deleted after 30 days. The record that a request was made, and what it cost, stays until your account is deleted.

We don’t use your Gmail data for anything else.

Google API Services User Data Policy

Worth Collab’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain words, for your Gmail data:

• We use it only to provide and improve the Worth Collab features you can see, listed above.
• Your Gmail data, and what we make from it, goes only to: Railway, which stores it; Anthropic’s Claude API, which reads it to sort mail and read offers, and drafts replies; Claude Code, only when our founder investigates a problem (see When a person can see your data); Resend, which carries offer summaries and event details in the emails we send you; FastMoss, which gets brand and product names from offers; and the brands you reply to. We also share it when the law or an abuse investigation requires.
• We never sell it, and never give it to ad platforms, data brokers or anyone who resells information.
• We never use it for ads, including ads based on your interests.
• We never use it to decide whether you get credit or a loan.
• We don’t use your Gmail data, or anything else we get from Google’s Workspace APIs, to create, develop, improve or train AI or machine-learning models. That covers our own models and anyone else’s, including general-purpose models like Claude. Anthropic’s Commercial Terms don’t allow it to train on what we send.
• A person at Worth Collab reads it only if you agree, to investigate a bug or abuse, or when the law requires it. See When a person can see your data.
• If A4K Corp or Worth Collab is ever sold, your Gmail data moves to the new owner only after you agree.
• Anyone who works on Worth Collab, and any company that takes it over, has to follow these rules too.

Worth Collab’s use of raw or derived user data received from Google Workspace APIs, including Gmail, will adhere to the Google User Data Policy, including the Limited Use requirements, and to the Google Workspace user data and developer policy.

AI processing

Worth Collab uses Anthropic’s Claude API, on Worth Collab’s own account, to read your mail and write drafts. Which model does what:

• Mail you send reaches Claude only as part of a thread when a reply is drafted, and when you press “Fill this in from your sent emails”. Once you block a sender, their mail no longer reaches Claude.
• Offers that arrive by email are read in batches. Every 5 minutes, the offers waiting across all Worth Collab workspaces go to Anthropic in one request. Claude reads each one on its own, and each answer comes back to its own workspace.
• If Anthropic’s safety check declines a draft or a voice-note rewrite, Anthropic may try again with another Claude model inside the same request. The data doesn’t leave Anthropic.
• We don’t use your Gmail data, or anything else we get from Google’s Workspace APIs, to create, develop, improve or train AI or machine-learning models.
• Anthropic’s Commercial Terms don’t allow it to train models on what we send or on Claude’s answers.
• Anthropic deletes what we send, and Claude’s answers, within 30 days. We delete batched offers as soon as we’ve read the answers, normally within minutes. If Anthropic’s safety systems flag a request, Anthropic may keep it for up to 2 years.
• Anthropic stores this data in the United States. It may run the AI processing itself in other countries.
• We also keep our own copy of every request and answer. See How long we keep data.

Replies sent from your Gmail

Worth Collab sends email from your Gmail in two ways: when you press a button, and by rules you set to send automatically.

• When you press a button. When you press Send from Gmail, on the deal page or on a draft in the Outbox or on Today, the reply goes right away. There’s no second step, so read it first. Send all in the Outbox lists every recipient and asks you to confirm.
• By rules you set to send automatically. Rules are off until you turn one on. A rule you turn on prepares a draft in the Outbox for you to check. If you change it to “Send it automatically”, Worth Collab sends the reply without you pressing Send from Gmail. Claude writes it from the offer, your rate card and your voice notes; if Claude can’t, a fixed template is used instead. Because Claude writes it from the brand’s email, what the brand wrote can steer the reply, so the reply is sent only if it passes these checks: it goes to the person who wrote to you; the offer came straight into your Gmail; it has no links, email addresses or phone numbers; every price in it is one of yours or one the brand offered; it’s under 200 words and doesn’t quote your voice notes; and the brand’s email has nothing addressed to an AI. Otherwise it waits in the Outbox with the reason. Rules send at most one automatic reply to an address a day, and at most 20 replies a day in all unless you change the limit.

Replies a rule sent are marked “Sent automatically” in the Outbox and on the deal, with the rule that sent them.

Every reply is saved with its deal, like any other mail you send. The owners and managers of your workspace can send replies from the connected Gmail. Creators can only draft them, and only an owner can set replies to send automatically.

Who we share data with

We don’t sell your data. To run Worth Collab we share it with the companies below, and each gets only what’s listed.

• Who

  Railway

  What they get

  Everything Worth Collab stores: the database, the app, this site and their logs.

  Why

  Hosting.

• Who

  Google

  What they get

  Sign-in requests. The Gmail requests that import your mail and send your replies. A request to revoke access when you disconnect.

  Why

  Sign-in, reading your mail and sending your replies.

• Who

  Anthropic (Claude API)

  What they get

  The message text, deal details, your display name, your TikTok handle if you typed one in, rate card, voice notes and the notes you type for a draft, described under AI processing.

  Why

  Sorting mail, reading offers, invitations and TAP links, drafting replies, suggesting rate card values and rewriting voice notes.

• Who

  Anthropic (Claude Code)

  What they get

  What our founder looks at while investigating a problem, under the rules in “When a person can see your data”. It runs on a Claude Max subscription under Anthropic’s Consumer Terms, with model training turned off.

  Why

  Our founder’s AI coding tool.

• Who

  Resend

  What they get

  Your email address and the emails we send you: sign-in links, the daily digest with offer summaries, invitation alerts, notices about your access, and the links and notices for deleting your account, a workspace or imported mail. Invitations, which go to the person you invite with your name, the workspace name and the role you gave them. When someone asks to join a workspace, an email to its owners with that person’s name and email address. A note to us with the name and TikTok handle of anyone who asks for access on this site. Mail you forward to your forwarding address, which Resend receives for us.

  Why

  Sending and receiving email. Resend keeps email data for 30 days.

• Who

  FastMoss

  What they get

  Brand names, words from product titles, and TikTok product and shop ids. Nothing else from your mail, and never your name, email address or TikTok handle. FastMoss’s terms let it use what we send to improve its own service.

  Why

  Shop and product sales figures behind an offer’s score.

• Who

  Calendly

  What they get

  If you’re shown the booking calendar after the request form: your IP address and browser details when it loads, and, if you book, your name, your email address and the time you choose. Nothing you typed in our form.

  Why

  Booking demo calls.

• Who

  Discord

  What they get

  Alerts when something fails: a job queue’s name and how many jobs failed or are waiting, that the worker crashed and the error’s type, and admin sign-in alerts with an internal user id. No names, addresses or message text.

  Why

  Telling us when something fails (security and reliability).

• Who

  The brands you reply to

  What they get

  Replies you send from your Gmail, including replies a rule sends automatically.

  Why

  Your deal conversations.

The shared lookup table

When Worth Collab looks up a brand or product at FastMoss, it saves the name it searched for and the match it found in a table every workspace uses. The next creator with an offer from that brand gets the match without a new lookup. The table holds only brand and product names and their matches: no mail text, no contact details and nothing that links a name to you. It stays after your account is deleted. Because it’s shared, a product link in an offer you receive can set which TikTok shop other creators see for that brand.

Other times we disclose data

We disclose data when the law requires it, for example under a valid court order, and when it’s needed to investigate abuse or protect someone’s safety. If A4K Corp or Worth Collab is sold or merged, we’ll tell you first, and your Gmail data moves only with your OK.

What other users can see

People outside your workspace never see your mail, your deals or your brand history. The only thing that crosses workspaces is the shared lookup table of brand and product names described above.

How long we keep data

Mail that becomes part of a deal, an event or a TAP link stays as long as your account does. Other mail, and the text of our log of AI requests, are deleted on a schedule.

Deleting an email in Gmail doesn’t delete our copy of it. Our copy is deleted on the schedule below, when you delete your account, or when you disconnect Gmail and choose to delete the imported mail.

Disconnecting Gmail

Disconnect, in Settings → Comes in → Gmail, gives you two choices:

• Disconnect: we ask Google to revoke Worth Collab’s access, delete the stored tokens and stop importing. Mail already imported, and the deals made from it, stay for the periods in How long we keep data. Work still queued for that mail stops: mail we haven’t read yet isn’t sent to Claude, and waits for you in Review. Deals already made are still scored and listed in your daily digest.
• Disconnect and delete imported mail: the same, and it also deletes the mail Worth Collab imported from Gmail, our log of AI requests about it, every deal, event and TAP link that came only from that mail, and the rate card suggestions read from your sent mail. Work already queued for that mail is stopped. You confirm it from a link we email you.

If Google doesn’t confirm the revoke, the app tells you to remove access yourself at myaccount.google.com/permissions.

You can also remove Worth Collab at myaccount.google.com/permissions at any time. That stops us reading and sending, but doesn’t delete what’s already imported.

If you leave a workspace, or an owner removes you: we disconnect your Gmail from it the same way as Disconnect. We ask Google to revoke Worth Collab’s access, delete the stored tokens and stop importing, reading and sending from it, and work still queued for its mail stops. The mail it already imported, and the deals made from it, stay with the workspace, as with Disconnect. The daily digest and alerts about your offers there go to the workspace’s owner instead of you. If you want that mail deleted too, choose Disconnect and delete imported mail before you leave, or delete your account.

Labels Worth Collab added stay in your Gmail after you disconnect, because we can no longer change your mailbox. To have them removed, first turn off Label offers in Gmail and choose to remove the labels, then disconnect.

Deleting your account and data

You can delete your account in Settings at any time: you type your email address, then confirm from a link we email you. Delete your data has the steps. An owner can delete a whole workspace the same way.

Once you confirm, we do the following at once:

• delete your account and, if you’re its only owner, your workspace and everything in it: imported mail, deals, drafts, events, TAP links, brand history, your rate card, settings and our log of AI requests;
• ask Google to revoke Worth Collab’s access to your Gmail, and delete the tokens;
• delete your access request, if we still have it, and invitations sent to your email address.

If your workspace has another owner, or you’re a member of someone else’s workspace, only your account is deleted, with any Gmail connection to your own mailbox there; the workspace keeps its deals and mail. See what happens to a shared workspace.

Copies in our backups are gone within 90 days. Copies at our providers expire on their own schedules: Anthropic within 30 days (up to 2 years for a request its safety systems flagged), Resend within 30 days and Railway’s logs within 7 days.

What stays: the shared lookup table of brand and product names, which holds nothing that links to you; a record that the deletion happened, with ids and row counts and no name, email address or mail; and a scrambled (hashed) form of a deleted workspace’s web address, forwarding address and intake link, so nobody else can take them.

When a person can see your data

A person at Worth Collab looks at your mail, or anything made from it, only:

• when you ask us to and agree in writing for specific messages, for example to fix a deal we read wrong. We keep a record of what you agreed to;
• when it’s needed to investigate a bug or abuse, or to keep the service secure;
• when the law requires it.

We also look at totals with no mail content in them, such as how many messages were sorted into each kind across all accounts.

Our founder may use Claude Code, Anthropic’s AI coding tool, to investigate a problem. It runs on a Claude Max subscription under Anthropic’s Consumer Terms, with model training turned off in the account settings, so Anthropic doesn’t train its models on those sessions. Anthropic can still use content its safety systems flag.

Staff at our providers may see data under their own terms, for example when Anthropic’s safety systems flag a request.

Inside Worth Collab, the owners and managers of your workspace can see everything in it. A member you add as a creator sees only their own offers, deals and mail, and their own digest and alerts go to them. Owners and managers can also send replies from the connected Gmail; creators can’t. A Gmail connection belongs to the member whose Gmail it is. Owners and creators can connect Gmail, each only their own; nobody else can reconnect it or change how far back it imports, its labels or marking mail read. An owner, or the person whose Gmail it is, can disconnect it, and removing someone from the workspace disconnects their Gmail. Only an owner can set replies to send automatically. Invite only people you trust with your mail. If a workspace manages a creator who has no login of their own, that creator’s daily digest and alerts go to the workspace owner.

Security

What we do today:

• Your Gmail access tokens are encrypted with AES-256-GCM before we store them.
• Sign-in links expire after 15 minutes, work once, and are stored only in hashed form. Opening one signs you in only after you press Sign in on the page it opens, which names the account.
• Traffic between your browser and Worth Collab uses HTTPS (TLS). So do our connections to Google, Anthropic, Resend and FastMoss.
• Each workspace’s data is walled off in the database with row-level security. The app’s database login can’t get around it, and we test it.
• The cookie that keeps you signed in is sent only over HTTPS and can’t be read by scripts on the page.
• Worth Collab never displays the HTML of your mail, so tracking pixels and remote images in it don’t load.
• Our host, Railway, says it encrypts the databases it stores.

Google requires an independent security assessment for apps that read Gmail. We’ve checked our code against its requirements and are fixing what we found before the assessment. No system is perfectly secure. If a breach affects your data, we’ll tell you as the law requires.

To report a security problem, email [email protected]. Our security page has more.

Your rights

Wherever you live, you can ask us to:

• tell you what data we hold about you, and send you a copy;
• correct it (you can edit most of it yourself in Settings);
• delete it (see Deleting your account and data).

Email [email protected] from the address you use with Worth Collab, so we know the request is yours. We reply within 45 days. We won’t treat you differently for asking. You don’t need an account to ask: if a creator’s mail or intake link brought us your data, you can make the same requests.

You can stop Gmail access at any time: disconnect in Settings → Comes in → Gmail, or remove Worth Collab at myaccount.google.com/permissions.

California residents

California law gives you the right to:

• know what personal information we collect, use and disclose, where it comes from, why, and who receives it. This policy sets that out, and you can ask for the specific pieces we hold about you;
• delete it, and correct it;
• opt out of its sale or sharing. We don’t sell or share personal information as California defines those words (sharing means for ads based on your activity across other businesses), and we haven’t in the past 12 months;
• limit the use of sensitive personal information. The contents of your email count as sensitive personal information. We use them only to provide the features you asked for, never to infer things about you;
• not be treated differently for using these rights.

In the past 12 months we collected, in California’s terms: identifiers (such as your name, email address, IP address and account ids), the contents of email, commercial information (such as deal terms and your rates) and internet activity (such as server logs). We collected them from the sources, and used them for the purposes, described above, and disclosed them only to the companies in Who we share data with, to run Worth Collab.

Someone you authorize can make a request for you. We’ll ask them for your signed permission and may ask you to confirm it’s you.

Children

Worth Collab is only for people 18 and over; the terms say so. We don’t knowingly collect data from anyone younger. If you think someone under 18 has an account, email [email protected] and we’ll delete it.

Where data is stored

Worth Collab is for people in the United States. Our host, Railway, runs Worth Collab’s servers and database. Railway’s data processing agreement says its main processing takes place in the United States. Resend, Anthropic store data in the United States. Anthropic may run the AI processing itself in other countries. FastMoss, which gets only brand and product names, doesn’t say where it processes them.

Changes to this policy

When we change this policy, we change the date at the top. If a change is material, for example a new use of your data or a new company receiving it, we’ll email account holders at least 14 days before it takes effect. If a change would let us use your Gmail data, or anything else we get from Google, in a new way or for a new purpose, we’ll ask for your OK first.

Contact

• Privacy questions and requests: [email protected]
• Help with the app: [email protected]
• Security problems: [email protected]
• Mailing address: A4K Corp, 5015 Birch St, Newport Beach, CA 92660