Privacy Policy

1. Information We Collect

• Account data: Name, email, role, organization
• Project data: Tasks, submissions, reports you create
• Payment data: Payment ID, plan, amount (card details handled by Razorpay — we never store card numbers)
• Usage data: Login times, feature usage, IP address for security

2. How We Use Your Information

• Providing and improving the Service
• Sending transactional emails (task updates, approvals, notifications)
• Security monitoring and fraud prevention
• Payment processing and billing
• Customer support

3. Data Sharing

We do not sell your personal data. We share data only with service providers: Razorpay (payments), SendGrid (emails), MongoDB Atlas (storage), Render.com (hosting), and law enforcement when legally required.

4. Data Retention

Account data is retained while your account is active. Project data is retained for 12 months after account closure. You may request deletion at any time.

5. Security

We implement JWT authentication, bcrypt password hashing, rate limiting, IP-based brute force protection, and HTTPS encryption. However, no system is 100% secure.

6. Your Rights

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent at any time

7. Cookies

We use only cookies necessary for authentication and session management. We do not use advertising or tracking cookies.

8. Children Privacy

The Service is not directed at children under 18. We do not knowingly collect data from minors.

9. Governing Law

This policy is governed by the Information Technology Act, 2000 and applicable Indian privacy laws.