This policy explains how WorkHub, a macOS desktop app made by Lightning Labs, handles your information, and in particular the Google user data it accesses when you connect your Google accounts: what it accesses, how it's used, where it's stored, who it's shared with, how it's protected and how to delete it. To learn what WorkHub does, see the WorkHub home page.
Who we are
WorkHub is made by Lightning Labs Co., Ltd. (CÔNG TY TNHH LIGHTNING LABS), 663 Trần Hưng Đạo, Phường Quy Nhơn, Gia Lai, Vietnam, tax code 4101680542. In this policy, “Lightning Labs”, “we” and “us” mean that company.
What WorkHub is
WorkHub is a macOS desktop app for people who work for several companies at the same time. It runs on your own Mac.
- Calendars: it brings each company's Google Calendar into one main calendar. It blocks your busy time across the other companies' calendars so nobody double-books you.
- Tasks: it turns notes, meeting transcripts and (optionally) work emails into a task list, using Claude, Anthropic's AI model.
- Time blocks: it finds free time for a task and books it in your calendar when you confirm.
Google user data WorkHub accesses
When you connect a Google account, the Google sign-in screen asks you to allow exactly these:
Basic account info (email address)
WorkHub uses your email address to tell your connected accounts apart.
Google Calendar (read and write)
- WorkHub reads events from each connected calendar: title, time, location, description, attendees and their responses, and the meeting link.
- It copies each work event into the one main calendar you pick. The title is prefixed with the company name, and attendee names and email addresses are listed in the event description. Attendees are never invited or notified.
- It creates private placeholder events titled “Busy”, with no details, on your other connected calendars.
- It reads free/busy information to suggest times for a task. It creates a calendar event only when you click to confirm.
Gmail (read-only, optional)
- Email reading is off by default, and you turn it on for each work account yourself.
- When it's on, WorkHub reads recent inbox messages (skipping Promotions, Social, Updates and Forums) to find things you need to act on.
- WorkHub never sends, deletes, labels or changes email.
How the data is used
WorkHub uses this data only to provide the features above, to the user who connected the account. We don't sell it, use it for advertising, build profiles from it, or give it to data brokers.
Use of AI
WorkHub does not use data obtained through Google APIs, including Google Workspace APIs, to develop, improve, or train generalized AI or machine-learning models. Google user data is sent to Anthropic only to provide the task suggestions the user sees in WorkHub.
Where the data is stored
All of it stays on your own Mac:
- your Google sign-in tokens, in files only your macOS account can read;
- your task list;
- a cache of your own calendar events, covering about the next four weeks and refreshed about every 5 minutes;
- the IDs of emails already processed, so they aren't processed twice.
Your Claude API key is kept in the macOS Keychain.
Lightning Labs runs no server for WorkHub. No Google user data is sent to, stored by or visible to Lightning Labs or its staff.
Sharing with third parties
Anthropic (Claude API), for task extraction only
WorkHub sends text to Anthropic using your own API key, so Anthropic can suggest tasks:
- the notes you type;
- meeting transcripts stored on your computer;
- and, only if you turned on email reading for that account, the sender, recipients, subject, date and text of recent emails.
When WorkHub processes a meeting transcript, the title of the calendar event at that time may be included as context. Everything travels over encrypted (HTTPS) connections.
Anthropic processes this data under its Commercial Terms of Service, which state: “Anthropic may not train models on Customer Content from Services.” You can read Anthropic's privacy policy for how Anthropic handles data.
Your own AI assistant
If you connect WorkHub to an AI assistant on your own computer, such as Claude Code, that assistant can read your WorkHub tasks and calendar agenda when you ask it to.
Legal requirements
Nothing else is shared, except where the law requires it.
Google API Services User Data Policy
WorkHub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
- Data stays on your Mac until you remove it.
- Remove next to an account in WorkHub's settings deletes:
- that account's sign-in token and cached events;
- the copies and “Busy” placeholders WorkHub created in your calendars.
- You can revoke WorkHub's access at any time at https://myaccount.google.com/permissions.
- Deleting the folder
~/Library/Application Support/workhubremoves everything WorkHub stored. - You can email travis.au@lightning-labs.io for help with deletion.
Security
- Connections to Google and Anthropic are encrypted.
- Sign-in tokens are protected by macOS file permissions, and your API key is kept in the Keychain.
- There's no WorkHub server that could be breached.
- WorkHub only requests access to the Google data its features need.
Summary by type of Google data
Basic account info (email address)
- Accessed
- The email address of each Google account you connect.
- Used for
- Telling your connected accounts apart.
- Stored
- On your Mac only.
- Shared with
- No one on its own. If you turn on email reading, your address can appear among an email's recipients, which are sent to Anthropic to suggest tasks.
- Protected by
- Encrypted connections to Google; it stays on your Mac, with no WorkHub server that could be breached.
- Deleting it
- Delete the folder
~/Library/Application Support/workhub, or revoke access at myaccount.google.com/permissions.
Google Calendar (read and write)
- Accessed
- Events from each connected calendar (title, time, location, description, attendees and their responses, meeting link) and free/busy information.
- Used for
- Copying work events into your main calendar, adding “Busy” placeholders to your other connected calendars, and suggesting times for tasks. Events are created only as described above, and time blocks only when you confirm.
- Stored
- A cache of your own events for about the next four weeks, on your Mac, refreshed about every 5 minutes. The copies and “Busy” placeholders WorkHub creates are in your own Google calendars.
- Shared with
- Anthropic, only the title of the calendar event at the time of a meeting transcript, as context for task suggestions. Your own AI assistant, if you connect one, can read your calendar agenda when you ask it to. Attendees are never invited or notified.
- Protected by
- Encrypted connections to Google and Anthropic; sign-in tokens protected by macOS file permissions.
- Deleting it
- Remove the account in WorkHub's settings to delete its sign-in token, its cached events, and the copies and “Busy” placeholders WorkHub created. You can also delete the WorkHub folder or revoke access.
Gmail (read-only, optional)
- Accessed
- Only for accounts where you turned email reading on: recent inbox messages, skipping Promotions, Social, Updates and Forums.
- Used for
- Finding things you need to act on, to suggest tasks. WorkHub never sends, deletes, labels or changes email.
- Stored
- The IDs of emails already processed, so they aren't processed twice, and the tasks in your task list, on your Mac.
- Shared with
- Anthropic: the sender, recipients, subject, date and text of recent emails, sent with your own API key to suggest tasks.
- Protected by
- Encrypted connections to Google and Anthropic; sign-in tokens protected by macOS file permissions.
- Deleting it
- Remove the account in WorkHub's settings, or revoke access at myaccount.google.com/permissions. Deleting the folder
~/Library/Application Support/workhubremoves the stored email IDs and your tasks.
Children
WorkHub isn't intended for children.
Changes to this policy
If we change this policy, we'll publish the new version on this page and update the effective date at the top. If a change affects how WorkHub handles Google user data, we'll say so clearly at the top of this page.
Contact
For questions about this policy, or for help deleting your data, email travis.au@lightning-labs.io.