Privacy

What we collect, why, and who else sees it. Last updated August 2026.

What we store

• Your email address. It is how you sign in — there is no password to store, because there are no passwords.
• Your name, bio and picture, if you set them.
• What you write: docs, comments, cards, and the files you attach.
• A signed cookie that keeps you signed in for 90 days.

What we do not do

No advertising, no third-party analytics, no tracking pixels, no session recording, and no selling anything to anybody. There is no advertising business here to feed, which is why there is nothing to collect for one.

We do not read your projects. We can technically reach the database — anybody running a service can — and we go in when something is broken and you have asked us to.

The lobby

The lobby shows whether you are at your desk, heads-down, or clocked out. You set that yourself. None of it is logged. There is no history table, no durations, and no manager view — everyone on a project sees the same thing you do. It cannot become a timesheet, because there is nothing stored to add up.

Guests

A guest gives us an email address so we can send them their link, and a name if they set one. That is all. Their access is scoped to the single project they were invited to.

Who else is involved

• Amazon Web Services — hosting, database, file storage, and the email that carries your sign-in links. Everything lives in AWS's Ohio region.
• Stripe, once billing exists, which will handle card details so that we never see them.

That is the entire list. When it grows, this page changes first.

Your work, your call

Ask and we will send you everything we hold about you, or delete it. Deleting your account removes your profile and signs you out everywhere; what you wrote in a shared project stays, because it is part of somebody else's conversation too — the same way a deleted mailbox does not unsend the mail.

Getting in touch

privacy@async.inc, and a person will answer.