Legal

Privacy

Last updated 22 August 2026

The short version

Workbench does not collect your data. There is no account, no telemetry, and no cloud sync. Everything the app knows about your work stays in a vault on your own machine.

What we store, and where

All persistent data lives in a local SQLite database on your computer. Nothing in that vault is transmitted to us.

  • Local profiles and your chosen display name
  • Agent sessions, transcripts, statuses, and bench mode history
  • Visual review jobs and their generated canvases
  • Preferences such as default model, agent provider, and clone roots
  • Recently opened local repository paths
  • GitHub access tokens for the accounts you choose to link
  • Terms acceptance timestamp and terms version

What we do not do

We do not operate a server that receives your code, prompts, transcripts, or usage analytics. There is no signup, so we hold no email address, no password, and no billing information.

Agent providers

When you run an agent, the CLI you selected sends your prompt and the relevant file contents to that provider for example Cursor or Anthropic in order to produce a response. That transfer is governed by the provider's own privacy policy and happens directly between your machine and them.

If you never start an agent session, no code leaves your machine through Workbench at all.

GitHub

Linking GitHub is optional and only needed for remote repositories and pull request features. Tokens are stored in the local vault and used to call the GitHub API directly from your machine.

Local repositories work with no GitHub account linked.

Secrets in the workspace

Workbench can seed and edit .env files inside the workspace you are working in. Values are masked in the interface by default. These files stay in your workspace and are never sent anywhere by the app.

Removing your data

Because everything is local, deleting the vault directory removes all Workbench data permanently. Unlinking a GitHub account in Settings deletes its stored token.

This website

This site is a static marketing page. It sets no advertising or tracking cookies and requires no account to browse or download.