Skip to content

Privacy

Foreman holds access to the account you earn from, so this is written to be read.

Last updated 30 August 2026

What Foreman stores

Your name, email and profile picture from Google. Your Upwork profile details, the jobs your hunts matched, the drafts you write, the proposals you send, your messages, contracts and the metrics derived from them.

An encrypted Upwork access token. Foreman never receives your Upwork password, because you authorize it on upwork.com.

How it is protected

Upwork tokens are encrypted at rest with AES-256-GCM and are never sent to the browser. Logs redact authorization headers, cookies and any field named like a token, and every logged field is truncated.

Every database query is scoped to a workspace, and tests assert that one workspace cannot read another.

Who else sees it

Model providers (Anthropic or OpenAI) receive the text needed to produce a draft: the job posting, your profile and voice samples, or the conversation you are replying to. They do not train on it under their business terms.

Freemius processes payments and receives your email and billing details. Resend delivers email. PostHog receives product analytics events, and Sentry receives error reports with personal data scrubbed. That is the full list of processors.

Foreman does not sell your data, and does not share it with Upwork beyond the API calls you authorize.

How long it is kept

Message bodies and raw tool payloads are trimmed on a schedule set by your plan, from 30 days on Free to 730 days on Agency. Identifiers, timestamps and metrics are kept so your analytics stay accurate.

Deleting your account removes your personal data after a seven-day grace period, and revokes every Upwork token immediately.

Your rights

Export everything as JSON and CSV from Settings, Data. Ask for correction or deletion at any time. If you are in the EEA or UK, the lawful basis is contract for the service itself and legitimate interest for security and product analytics.

Cookies

Foreman sets one session cookie for sign-in. Analytics use a first-party identifier and no advertising cookies. There is nothing to consent to beyond signing in.

Foreman is an independent product and is not affiliated with or endorsed by Upwork Global Inc.