Privacy Policy

1. Information We Collect

We collect information you provide directly to us when creating an account, configuring your organization, or interacting with workspaces. This includes:

• Account Identifiers: Name, work email address, job title, and team affiliations.
• Operational Data: Projects, tasks, sprint cycles, task attachments, and documentation pages created by your organization.
• Integration Credentials: OAuth tokens for GitHub, Google Calendar, and Google Drive, which are encrypted at rest using industry-standard AES/Fernet encryption.

2. Security & Data Protection

We implement strict technical and organizational controls to protect personal and business data against unauthorized access, loss, or alteration:

• All network communication is enforced over TLS 1.3 encryption.
• Authentication is governed by role-based access control (RBAC) with distributed token revocation and brute-force mitigation.
• Uploaded documents and attachments are scanned and served with forced download disposition to prevent inline execution risks.

3. Data Retention & Your Rights

You have the right to access, rectify, export, or delete your personal data. Department and organization administrators can manage member profiles directly from the Admin settings console. Upon account deactivation, operational tokens and active sessions are revoked immediately.