Security

How we protect your data

• Encrypted connections. This website and the Worth Collab app load only over HTTPS, so what you send and see is encrypted on the way. When Worth Collab calls Google, Anthropic and the other outside services it uses, those calls go over HTTPS too.
• Your Gmail tokens are encrypted. When you connect Gmail, Google gives Worth Collab tokens that let it read and send your mail. We encrypt them with AES-256-GCM before storing them, with a key kept outside the database. When you disconnect Gmail, we delete them.
• No passwords. You sign in with a link we email you, or with Google. Each link works once and expires after 15 minutes. Google sign-in shares only your name, email address and profile picture with Worth Collab. Worth Collab no longer keeps the tokens Google sends at sign-in, and we’re deleting the ones stored before September 23, 2026.
• Each workspace is walled off. Your deals, mail and settings sit in database tables with row-level security: the database itself returns only the rows of the workspace a request is working in. The account the app uses to reach the database can’t switch that off.
• Email is never shown as a web page. Worth Collab doesn’t display the HTML of the mail it imports, so images and tracking pixels in brand emails don’t load when you open an offer.

Our database host, Railway, encrypts the database at rest, as its data processing agreement states. Worth Collab adds its own encryption only for your Gmail tokens. Everything else, including the mail it imports, relies on Railway’s encryption and on the access rules on this page.

Who can see your data

• Only Worth Collab’s founder has a login to the live database, and uses it only for the reasons in When a person can see your data, in our privacy policy. Tests and test copies of the app run on a separate database with invented data and their own passwords, never the live one.
• Our founder may use Claude Code, Anthropic’s AI coding tool, to investigate a problem, and it can see the data involved. It runs on a Claude Max subscription under Anthropic’s Consumer Terms, with model training turned off, so Anthropic doesn’t train its models on that data. Anthropic can still use content its safety systems flag.
• The services Worth Collab runs on, such as our host and Anthropic, handle your data under their own security terms. The privacy policy lists them.

Independent assessment

Reading Gmail is what Google calls a restricted scope. Apps that ask for one must pass an independent security assessment every year before Google verifies them. The assessment is CASA (Cloud Application Security Assessment), a standard from the App Defense Alliance, and an assessor Google authorizes carries it out. Google’s help page on the assessment explains more.

We’re preparing for this assessment and haven’t been assessed yet. We’ve checked our own code against its requirements and are fixing what we found before we apply. When we pass, we’ll say so here, with the date.

Report a security problem

If you think you’ve found a security problem in Worth Collab, email [email protected]. Please include:

• what the problem is, and the page or feature where you found it;
• the steps to make it happen again;
• what someone could do with it;
• how to reach you.

We reply within 5 business days.

While you look

Security research is allowed under Acceptable use in our terms, if you follow these rules:

• Use only your own account and your own data.
• Don’t view, change or delete anyone else’s data. If you reach someone else’s data by accident, stop and tell us.
• Don’t run load tests, or anything else that floods or slows down the service.
• Don’t make Worth Collab send email to anyone who hasn’t agreed to get it.
• Keep the details to yourself until we’ve fixed the problem.

The same contact details are in /.well-known/security.txt, the standard file for security contacts.

What you can do

• Protect the email account you sign in with. Worth Collab has no password and no second sign-in step of its own, so anyone who can open your email, or your Google account, can sign in as you. Turn on 2-Step Verification for that account. If you use Continue with Google, Google’s own checks guard your sign-in.
• Sign out on shared devices. A sign-in lasts 7 days from when you sign in, however often you use Worth Collab; then you sign in again. To sign out, open your account menu (your name or picture) and choose Sign out. That signs out the device you’re on. If you lose a device that’s signed in, open Account in the same menu and choose Sign out other devices, or email [email protected] and we’ll do it for you.
• Invite only people you trust. Owners and managers can see all of your workspace’s deals and mail; creators see only their own. Owners and managers can also send replies from the connected Gmail; creators can’t. Owners and creators can connect and set up their own Gmail, and nobody else’s, and removing someone disconnects their Gmail. Only an owner can set replies to send automatically.
• Choose which replies send themselves. Reply rules prepare a draft for you to approve unless you set a rule to “Send it automatically”. A rule set that way sends a reply, usually written by AI from the brand’s email, without you reading it first. An AI-written reply can be steered by what the brand wrote, so it’s sent only to the person who wrote to you, and only if it has no links or contact details and no prices other than yours or the brand’s. Any other reply waits in the Outbox for you. You can change this in Settings → Gets answered. Replies a rule sent on its own are marked “Sent automatically” in the app.
• Disconnect Gmail when you stop using Worth Collab. Our Delete your data page explains how to disconnect Gmail, and how to delete your account if you want everything gone.