Privacy policy

What we collect

Account data: your email address, a password (stored only as a cryptographic hash by our authentication provider), an optional display name, and two-step verification enrollment status.

Workspace data: your company name and profile, memberships and roles, invitations, projects, tasks, and workspace activity events.

Contact messages: if you use the contact form, we store the name, email, optional company, and message you submit.

What we do not do

We do not sell personal data. We do not run advertising trackers. Authentication emails are sent with click tracking disabled. The public website sets no analytics cookies.

Where data lives

Application data is stored in a managed PostgreSQL database operated by Supabase. Transactional email is delivered by Resend from a verified domain. The website is hosted on Vercel. Each processor receives only the data required for its function.

How data is protected

Company data is isolated per workspace with database-enforced row-level security. Workspace owners must use two-step verification. Data is encrypted in transit. Browser storage holds session tokens and your theme preference; it is never treated as proof of access.

Your choices

You can correct company details in the product. A company owner can end a trial or request company deletion from Settings. A deletion request starts a 30-day recovery period before permanent removal is processed.