Legal
Privacy
Last updated 22 August 2026
The short version
Workbench does not collect your data. There is no account, no telemetry, and no cloud sync. Everything the app knows about your work stays in a vault on your own machine.
What we store, and where
All persistent data lives in a local SQLite database on your computer. Nothing in that vault is transmitted to us.
- Local profiles and your chosen display name
- Agent sessions, transcripts, statuses, and bench mode history
- Visual review jobs and their generated canvases
- Preferences such as default model, agent provider, and clone roots
- Recently opened local repository paths
- GitHub access tokens for the accounts you choose to link
- Terms acceptance timestamp and terms version
What we do not do
We do not operate a server that receives your code, prompts, transcripts, or usage analytics. There is no signup, so we hold no email address, no password, and no billing information.
Agent providers
When you run an agent, the CLI you selected sends your prompt and the relevant file contents to that provider for example Cursor or Anthropic in order to produce a response. That transfer is governed by the provider's own privacy policy and happens directly between your machine and them.
If you never start an agent session, no code leaves your machine through Workbench at all.
GitHub
Linking GitHub is optional and only needed for remote repositories and pull request features. Tokens are stored in the local vault and used to call the GitHub API directly from your machine.
Local repositories work with no GitHub account linked.
Secrets in the workspace
Workbench can seed and edit .env files inside the workspace you are working in. Values are masked in the interface by default. These files stay in your workspace and are never sent anywhere by the app.
Removing your data
Because everything is local, deleting the vault directory removes all Workbench data permanently. Unlinking a GitHub account in Settings deletes its stored token.
This website
This site is a static marketing page. It sets no advertising or tracking cookies and requires no account to browse or download.