# Who can see what

> Your chats, files, agents, and personal connections are private by default. Being a workspace admin does not add access to them.

Source: https://docs.tulipfarm.ai/security/

In TulipFarm, most of your work is private to you until you share it. Membership in a [workspace](https://docs.tulipfarm.ai/concepts/workspaces-members-and-teams/) alone does not open another member's personal chats, sources, agents, skills, connections, or files.

## Private by default

These items are visible only to you:

- Personal [chats](https://docs.tulipfarm.ai/concepts/chats-and-projects/). The **Chats** list says "Only you can see these chats."
- Your files in **My files**, until you share them.
- Files that you add to your Knowledge. Your chats and agents can search them. Other people can't.
- Your agent tasks in **My agent tasks**.
- Your personal memory under **Account**.

## Admin is not a master key

A workspace has two roles, Admin and Member. Admins manage membership, workspace settings, models, and table access.

Being a workspace admin does not add access. An admin can't open your personal chats, agents, files, or connections because of the Admin role.

On the **Usage** page, admins see workspace totals. Members see the usage of their own chats and agents.

## Personal connections

A [connection](https://docs.tulipfarm.ai/integrations/) to a personal account is visible only to you.

| Connection | Who sees it |
| --- | --- |
| Gmail | Only you. Admins can't see it. |
| Google Drive, Sheets, Docs, and Slides | Only you |
| GitHub | Only you in this workspace. Admins can't view or use it. |
| Slack | Selected people and teams. Connection managers control sharing. |
| GitHub team | Selected people and teams |
| Jira, Confluence, and Trello | Your account, or a shared business account |

## Projects

A [project](https://docs.tulipfarm.ai/concepts/chats-and-projects/) is a shared space for a team's chats, files, and instructions.

- Only project members can open a project.
- Project members can read the chats in the project.
- Files that you add to a project are visible to everyone in that project.

## Teams

A team is a group of members. Admins share access to tables, agents, and connections once per team.

- Table access grants add up across teams. There are no deny rules.
- A row permission applies to all rows in the table.
- Table access does not share files.

## Agents

An agent's **Access** tab lists each person and team that it is shared with. Each person or team gets one of four permissions.

| Permission | What it allows |
| --- | --- |
| Read | See the agent |
| Invoke | Start tasks with the agent |
| Edit | Change the agent's instructions |
| Manage | Change access, execution, and activation |

## Sources and citations

When an answer cites a source, TulipFarm checks your access again each time you open the citation. If your access ended, you see a message that the source changed, was removed, or your access ended.

## In this section

  - [Approvals and agent permissions](https://docs.tulipfarm.ai/security/approvals-and-agent-permissions/): How approvals work and whose permissions an agent uses.
  - [Data retention and deletion](https://docs.tulipfarm.ai/security/data-retention-and-deletion/): What happens when you delete a chat, a row, or a file, or close a workspace.
  - [Analytics and cookies](https://docs.tulipfarm.ai/security/analytics-and-cookies/): What optional analytics collect and how to turn them off.