Our Approach to Data Processing

At Workspark, we take a deliberate approach to protecting your data. We avoid third-party tools wherever possible and never use tracking cookies on our platform — which is why you won't see a cookie consent banner on our site. Your data stays yours.

That said, running a modern platform means we do work with a small number of trusted external processors to keep things running smoothly. Below is a transparent account of who they are, what they do, and why we use them.

Infrastructure & Hosting

Google Cloud Platform

Our entire infrastructure runs on Google Cloud Platform, hosted in the Netherlands (europe-west4) region. This means your data is stored and processed within the European Union. Google Cloud provides the compute, storage, and networking foundation that powers Workspark.

Data processed: All platform data, including user accounts, organization data, and application content
Purpose: Infrastructure hosting and cloud computing
Location: Netherlands, EU
Website: cloud.google.com

Cloudflare

We use Cloudflare for networking infrastructure, content delivery (CDN), and DDoS protection. Cloudflare sits between you and our servers to ensure fast, reliable, and secure access to Workspark.

Data processed: Network traffic metadata, IP addresses, request headers
Purpose: CDN, DNS, network security, and performance optimization
Website: cloudflare.com

AI & Intelligence

Google Gemini

Workspark uses Google Gemini to power our AI features, such as generating insights and summaries. When you interact with AI-powered features, relevant content is sent to Gemini for processing.

Data processed: Content submitted to AI-powered features (e.g., accomplishment summaries, review insights)
Purpose: Large language model capabilities for AI features
Location: EU region processing
Website: ai.google.dev

Observability & Error Reporting

Sentry

We use Sentry for system observability and error reporting. When something goes wrong in the platform, Sentry helps us identify and fix the issue quickly. This may include technical information about the error and limited contextual data.

Data processed: Error reports, stack traces, browser/device metadata, and limited contextual data
Purpose: Application monitoring and error tracking
Website: sentry.io

Communications

Postmark

Postmark handles our transactional emails — things like password resets, invitation emails, and notification digests. We only send emails that are directly related to your use of the platform.

Data processed: Email addresses, email content for transactional messages
Purpose: Transactional email delivery
Website: postmarkapp.com

HubSpot

We use HubSpot for customer outreach and communication. This is primarily used for communicating with prospective and existing customers about Workspark.

Data processed: Contact information (name, email), communication history
Purpose: Customer relationship management and outreach
Website: hubspot.com

Slack

Our team uses Slack for internal communication. In some cases, system notifications (such as alerts) are routed through Slack. Customer data is not shared in Slack channels.

Data processed: Internal operational notifications only
Purpose: Internal team communication
Website: slack.com

Billing & Payments

Stripe

Stripe processes all payments and billing for Workspark. When you subscribe to a paid plan, your payment information is handled directly by Stripe — we never store your card details on our servers.

Data processed: Payment information, billing details, transaction history
Purpose: Payment processing and subscription management
Website: stripe.com

Your Rights

Under the GDPR, you have the right to know how your data is processed and by whom. If you have questions about any of the processors listed above, or if you'd like to exercise your data rights, please contact us at [email protected].

We review our external processors regularly and will update this page whenever changes are made.

External Processors