Security

What Untoil holds

Untoil reads content your team can already see in Slack, Google Workspace, and Microsoft 365, and uses it to find repeated work. That means we hold the names, work emails, job titles and departments of your staff, excerpts of the messages and documents a finding came from, anything your team posts or attaches to Untoil directly, and, where you connect payroll, an hourly rate per person.

The Privacy Policy describes this in full. This page is about how it is protected.

Where it runs

• Application and scheduled jobs run on Vercel, in a United States region.
• Database and file storage are Supabase, on Amazon infrastructure in a United States region.
• Everything else we rely on is listed on the subprocessors page, with what each one handles. All of them process data in the United States.

Encryption

Traffic to Untoil is TLS only. Data at rest in the database and in file storage is encrypted by the platforms above. Access tokens for Slack, Google, Microsoft and payroll connections are encrypted before they are stored, so reading the database row is not enough to use them.

Who can see what

Inside your workspace

• Members see their team’s toil. Managers additionally see hourly rates, cost by department, and team settings.
• Posting anonymously hides the author from everyone in the workspace, including managers, and the author is left out of notifications, exports, the API, and the text sent to AI models.
• Untoil reads only what is visible to the whole team. It does not read direct messages, private channels, or personal mailboxes.

Untoil staff

• A small number of staff can reach customer data through an internal admin tool, to operate and support the Service.
• When a member of staff enters a customer workspace to investigate something, that access is recorded and the customer can see the log.
• We do not read customer content except to run the Service, secure it, comply with law, or because you asked us to look at something.

Signing in

• Email links, Google, and Microsoft sign-in. We never see your password for any of them.
• Company single sign-on is available, and user provisioning through SCIM so that removing someone in your identity provider removes them here.
• Session handling and password reset are managed by Supabase Auth rather than written by us.

What we do not do with your data

• We do not let AI providers train on it. Every model request is routed only to providers contractually committed not to train on it. Some providers hold a request up to 30 days to check for abuse, then delete it.
• We do not sell it or share it for advertising.
• We do not use one customer’s content to answer another customer’s questions.

Keeping and deleting

• Workspace content is kept while the workspace is active, and removed 120 days after a subscription ends or when you ask us to delete it.
• Deleting a toil hides it at once and removes its attachments from storage after 120 days, which is also how long you have to restore it.
• Disconnecting a tool stops collection immediately. What was already extracted stays until you remove it or the workspace is deleted.
• Session recordings are kept up to 90 days, and the text of AI requests for 30 days.

If something goes wrong

If we learn of a breach affecting your data we will tell you without undue delay, with what we know, what we are doing, and what we suggest you do. Where the law requires it we will also notify regulators and affected individuals.

To report a vulnerability or anything that looks wrong, email team@untoil.com. We will acknowledge it, and we will not pursue anyone who reports a genuine issue in good faith, gives us a reasonable chance to fix it, and does not access or change data beyond what is needed to show the problem.

What we have not done yet

Untoil is an early company and this section is here so that nobody has to guess.

• We hold no third-party security certification. We have not completed a SOC 2 audit, and we will not claim one until an auditor has signed it.
• We have not had an independent penetration test.
• Deleting a workspace is done by a person at Untoil rather than automatically, so that a billing problem can never erase a customer’s data on its own.

If your review needs any of these, tell us what you need and by when, and we will give you a straight answer about whether we can meet it.

Contact

Untoil, Inc.
2261 Market Street STE 12903
San Francisco, CA 94114
United States
team@untoil.com