Privacy Policy
Last updated: October 2025
Shape is built for calm, focused collaboration — and that includes how we treat your data. We believe privacy is a fundamental feature, not an afterthought.
This policy explains what information we collect, how we use it, and the choices you have.
1. Information We Collect
Account information
When you create an account, we collect your email address and password. Passwords are hashed and never stored in plain text.
Workspace content
You control the information you add to Shape — including messages, discussions, tasks, and files. This content belongs to you and your team.
Usage and diagnostics
We use analytics and error-reporting tools (Amplitude and Sentry) to understand how Shape is used and to improve performance. These tools collect technical data such as browser type, device information, and usage patterns. We do not sell or share this data for advertising.
Payments
All payments are securely processed by Stripe. Stripe may collect billing details and payment information in accordance with their own privacy policy. Shape never stores or processes your credit card data directly.
2. How We Use Information
We use your information to:
- Provide and maintain the Shape service
- Fix bugs and diagnose issues
- Improve features and user experience
- Communicate important updates (e.g., security or policy changes)
- Process subscriptions and payments
We may temporarily access your data when necessary for support or debugging, but we never use your content for training AI models or for any purpose unrelated to your workspace.
3. Data Security
- All data is encrypted in transit (HTTPS/TLS) and at rest (AES-256).
- Shape's infrastructure runs on Amazon Web Services (AWS), hosted in the United States.
- Access to production systems is restricted to authorized personnel under strict confidentiality.
4. Analytics & Error Reporting
We use:
- Amplitude to measure anonymous usage trends and feature adoption.
- Sentry to monitor and diagnose application errors.
Both services receive technical metadata (browser, device type, stack traces) but not your actual discussion content.
5. Data Retention & Deletion
- You can request deletion of your account and associated data at any time.
- We retain workspace data for as long as your account remains active. Deleted data may persist briefly in backups for recovery and compliance purposes before being permanently erased.
6. Third-Party Services
Shape relies on reputable providers to operate securely:
- Amazon Web Services (AWS) – infrastructure and data hosting
- Amplitude – analytics
- Sentry – error monitoring
- Stripe – payment processing
Each of these providers maintains their own security and privacy certifications.
7. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights or ask questions about this policy, contact us at privacy@shape.work.
8. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via email or in-app notice. By continuing to use Shape, you agree to the current version of this Privacy Policy.
9. Contact
Shape
United States
Email: privacy@shape.work