Your keys and your data: how Upwork Agents keeps them safe
An agent needs access to your Upwork account and your OpenAI key. What is stored, how, and what you control.
Handing an app access to your freelance account is a decision worth thinking about. Here is a plain description of what Upwork Agents stores, how, and the controls you keep.
Your Upwork password
It never reaches us. You connect through the official sign-in on Upwork using OAuth, and approve access there. The app receives a token that stands in for permission, not your password.
Tokens and your OpenAI key
Upwork access tokens and your OpenAI API key are stored encrypted. Your key is used only to run your own agents, and OpenAI bills you directly for that usage. You can create and revoke keys at any time on the OpenAI API keys page.
Sign-in and separation
You sign in with Clerk, and every record, including agents, drafts, run logs and conversations, is stored under your own account. Other users cannot see it.
What you can do at any time
- Disconnect Upwork from the Integration page.
- Remove your OpenAI key and agents stop running.
- Pause an agent or switch its tools to review.
- Read the log of everything an agent did.
A good habit
Use a separate OpenAI key for this app, with a spending limit, so you can see its usage on its own and revoke it without affecting anything else.