Privacy Policy

TeamShare ("TeamShare", "we", "us", "our") provides a shared workspace where individuals and organizations plan projects, track tasks, share documents, manage environment variables, and communicate. This policy explains what personal data we process, why, and what rights you have. If you have questions, write to us at hello@teamshare.name.ng.

We collect three categories of data:

• Account data — your name, email address, and password (stored as a salted hash). We never store passwords in plain text.
• Workspace content — the projects, tasks, comments, documents, chat messages, environment variables, and settings you and your teammates create in a workspace. This is your data, not ours.
• Technical and usage data — IP addresses, device and browser information, page interactions, and API call logs we need to operate, secure, and improve the service.

When you make a payment, the card details are collected and processed by Paystack. We never see or store your full card number.

• To provide the service — host your workspaces, deliver notifications, and keep the app working on web and mobile.
• To keep it safe — prevent abuse, investigate suspicious activity, and enforce our Terms of Service.
• To improve — understand how the product is used, fix bugs, and measure performance. We analyze this in aggregate.
• To communicate — send transactional email (verification, invites, digests, due-date reminders) and, with your consent, product news.

We do not sell personal data, and we do not use your workspace content to train AI models.

We share data only in these limited cases:

• File storage — uploaded documents and images are stored by Cloudinary under a processing agreement.
• Email delivery — transactional messages are sent through Brevo, our email provider.
• Payments — Paystack processes payments and refunds. They receive your payment details, not your workspace content.
• Legal compliance — when required by law, a court order, or to protect the rights and safety of TeamShare and its users.

None of these providers may use your data for their own purposes. Where they are located outside your jurisdiction, transfers follow standard contractual safeguards.

Environment variables are a special category: they are real credentials your software needs to run. They get extra care by design:

• Encrypted at rest with AES-256-GCM; the encryption key is held separately from the data.
• Never written into logs, error messages, or notifications.
• Reveal-on-click is permissioned and recorded in an audit trail; Viewer roles cannot see secret values.
• You can export a workspace's variables as a .env file at any time.

TeamShare's Agent Hub lets you connect agents that work from your own machine through the TeamShare Bridge. This changes where your data goes, so it deserves its own section:

• Agents run on your computer, not on our servers. We never see the files or models an agent touches beyond what it reports back.
• When you configure an agent with a model provider, the prompts and content you send it are processed by that provider under its own privacy policy.
• Agent actions in TeamShare (task updates, comments, chat replies) are logged, so everything an agent does is auditable.
• Agents only access workspaces you explicitly connect them to — never by default.

We keep your data for as long as your account is active, so your workspaces keep working. When you delete content, we remove it from our systems within 30 days. When you close your account, we delete your account data and workspace content, except:

• Billing records that the law requires us to keep (typically 7 years).
• Audit logs needed to investigate fraud or abuse (retained as long as legally required).
• Anonymized aggregates that no longer identify you.

• Transport encryption (TLS) on every connection; encryption at rest for stored data.
• Secrets encrypted with AES-256-GCM; API keys hashed with SHA-256; passwords salted and hashed.
• Role-based access control on workspaces, teams, and projects — the least privilege needed to do the job.
• We run the same product we sell: the posture documented on our Security page applies to us too.

No system is perfectly secure. If you believe you have found a vulnerability, tell us before disclosing it publicly.

Depending on where you live — including under the EU GDPR and Nigeria's Data Protection Act — you can:

• Access and correct your personal data from your profile and workspace settings.
• Export your data at any time.
• Delete your data or close your account, which triggers the deletion process in section 7.
• Opt out of marketing email; transactional email (password resets, payment receipts) is always sent.
• Object to or restrict processing, and ask us to delete data we hold about you.

To exercise any of these rights, email hello@teamshare.name.ng. We respond within 30 days.

We use a small number of cookies and local-storage keys to keep you signed in and remember your theme and session preferences. We do not use third-party advertising cookies. Our realtime features use a WebSocket connection that carries no cookies beyond your session.

TeamShare is not directed at children. You must be at least 16 years old — or the age of digital consent in your jurisdiction, if higher — to use the service. We do not knowingly collect data from children; if you believe a child has given us data, contact us and we will delete it.

We may update this policy as the product evolves. Material changes are announced on this page and, where appropriate, by email to workspace owners. Continued use after the effective date means you accept the revised policy.

Questions, complaints, or data requests: hello@teamshare.name.ng — we read everything and reply.