Work Theory
Privacy
This page lists everything worktheory.ai stores about the people who use it, why, for how long, and how to have it deleted. It was last changed on 4 October 2026.
The waitlist
Joining the waitlist stores one row: your email address, the kind of work you picked (if you picked one), your ZIP code, how many times you have joined, and when you first and last joined. Rows from an earlier version of the form may also hold a first name; the current form does not ask for one.
We use the list to decide whom we can serve first. Joining sends no email, and nothing is sent to you automatically later. A person may write to you by hand when we can take you on. We do not sell or share the list, use it for advertising, or use it to train AI models.
The row stays until you ask us to delete it.
Limits and counts
To stop one connection submitting the form over and over, the server counts submissions from each IP address for ten minutes. Wrong passwords are counted the same way, for fifteen minutes. These counts are held only in the server's memory, are never written to disk, and are lost when it restarts.
We count visits to the home page so we know how many people visit. To count each visitor once a day, the server stores a one-way code made from the date, your IP address and your browser's description of itself. The code cannot be turned back into the address, and one day's codes cannot be matched with another day's. Each day's codes are deleted when the first visit of a later day is counted; only the daily totals are kept.
Our investor deck is behind passwords we issue. The server counts how many times each password opens it, and nothing else: no IP address, device or time.
Cookies and tracking
The site sets no cookies. It uses no analytics service, advertising, tracking pixels or scripts from other companies.
Logs and backups
The server keeps a log of errors and events, so we can find and fix problems. It does not record what you type into the form, and it does not record IP addresses. When a line has to refer to a person, it names them by a short code and the domain of their email address, never by the address itself.
Once a day the server copies its databases to the same disk, so that a mistake can be undone. Copies older than the fourteen most recent are deleted, so anything removed from the live databases is gone from the copies about two weeks later.
The retired price list
Until October 2026 this site offered a tool that listed the software a business pays for, priced it, and emailed the result. It has been retired, and nothing is sent from it any more.
If you used it, we still hold what it stored: your email address, the website you gave if you gave one, the list it showed you (the tools, their prices and the total), the IP addresses it recorded, and a record of the emails it sent you or chose not to send, whether they were delivered and whether you unsubscribed. Nothing deletes these automatically any more. They stay until you ask us to delete them, or until we delete the tool's data ourselves.
The tool also kept daily counts of how far visits got and which rows people corrected, the names of software it did not recognise, and error messages from the page with anything that looked like an email address blanked out. None of these is linked to a person.
The unsubscribe and "not me" links in its emails still work: they mark your address so that it is never emailed. Its confirmation link no longer does anything.
Deleting what we hold
Write to hello@worktheory.ai from the address you want deleted. A person checks the request and deletes every row that holds that address: the waitlist row and anything the retired tool kept.
One thing is kept back. If the retired tool ever held your address, the address stays on its do-not-email list, so that it is never emailed again. Ask, and we remove that too. Backup copies age out about two weeks after a deletion.
Who else handles it
Railway runs the server and stores its databases, backups and log; it also keeps its own records of requests to the site. Google hosts our email, so anything you write to hello@worktheory.ai, a deletion request included, is stored there. Resend delivered the retired tool's emails and keeps its own records of them; it now only delivers notifications from our own tools to our own inbox. No one else receives any of this.