Last updated October 25, 2026
What we collect, why, and what we never do with it. Written to be read, not skimmed past.
We collect what we need to run TeamOnly and nothing more. We don’t sell personal data, we don’t show ads, and we don’t use your data or your apps’ data to train AI models. teamonly.dev has no analytics or advertising cookies.
TeamOnly is not open yet. Today the only personal data we hold is what people type into the waitlist form. This policy also covers the service as it launches, and we will update it if anything here changes.
“TeamOnly”, “we” and “us” mean the people who run teamonly.dev. You can reach us at hello@teamonly.dev.
This policy covers the teamonly.dev website and waitlist, TeamOnly accounts and the dashboard, the command line tool, and the sign-in screen in front of apps hosted on teamonly.app.
We play two roles. For our website, waitlist and accounts, we decide what is collected and why. For the data people put into an app hosted on TeamOnly, the company that owns the app is in charge and we process it on their behalf. If you use an app built by your employer, questions about that app’s data are best sent to them first.
Waitlist. Your work email, the answers you choose to give (what you built with, what your tool does, how many coworkers would use it), the page you signed up from, the country your request came from, and the date.
Accounts (once we open). Your name, work email, your organization and its email domains, the apps you deploy and who can open them. Payments are handled by Stripe. We never see or store your full card number.
Signing in to an app. When someone signs in with Google or Microsoft, we receive their email address, name and, for Google Workspace accounts, the company domain. We use this to check that the person belongs to the right company and to tell the app who is signed in. We keep a session record so they stay signed in.
App content. Whatever an app stores in its database and file storage. It lives in that app’s own storage. We don’t look at it except to keep the service running, to fix a problem the app’s owner asks us about, or when the law requires it.
Logs. Like any web service, our hosting records requests: IP address, browser, the address requested and the time. We use these to keep the service working and secure, and we keep them for a short time.
Email. If you write to us, we keep the conversation so we can help you.
We ask Google and Microsoft only for basic sign-in information: your email address, your name and a profile picture link (which we don’t store). We do not request access to your email, files, calendar, contacts or anything else in your account.
TeamOnly’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this information only to sign you in and to tell the app you opened who you are. We don’t sell it, use it for advertising, or use it to train AI models, and people at TeamOnly don’t read it unless you ask us to, it is needed for security, or the law requires it.
We don’t send marketing email to people who signed in to an app. They didn’t sign up with us, so we leave them alone.
teamonly.dev sets no analytics or advertising cookies. Once accounts open, the dashboard uses a sign-in cookie.
Each app on teamonly.app uses one session cookie, set only for that app’s exact address, so you stay signed in. It is required for the app to work and isn’t used for tracking.
We use a small number of providers to run TeamOnly. Each one only gets what it needs to do its job.
We will share data if the law requires it, and we will tell the affected customer first when we are allowed to. If TeamOnly is ever sold or merged, this policy will continue to apply to data collected under it.
Data is stored and processed on Cloudflare’s network, which can include the United States and other countries. Choosing a data region is planned for the Business plan.
You can ask us to show you the personal data we hold about you, correct it, export it or delete it. Email hello@teamonly.dev and we will reply within 30 days. Depending on where you live, laws such as the GDPR, the UK GDPR or the California Consumer Privacy Act give you these rights and others, including the right to complain to your local data protection authority.
If your request is about data inside an app your employer runs on TeamOnly, we will pass it to them, because they are in charge of that data.
Every app is behind sign-in, and each app’s data, files, cookies and secrets are kept apart from every other app. The details are on our security page. No system is perfect. If we ever have a breach that affects your data, we will tell you promptly.
TeamOnly is a tool for work. It isn’t meant for anyone under 16, and we don’t knowingly collect their data.
If we change this policy, we will update the date at the top. If a change matters, we will email account holders before it takes effect.
Questions or requests: hello@teamonly.dev. A person reads every message.