🔒 Legal

Privacy Policy

Your privacy matters to us. This policy explains exactly what data Project Tracker collects, why we collect it, and how we protect it.

Last updated: 1 January 2026 · Effective: 1 January 2026 · Questions: privacy@project-tracker.in

Table of Contents

Who We Are
Data We Collect
How We Use Your Data
Storage & Security
Sharing Your Data
AI Features & Your API Key
Cookies & Sessions
Your Rights
Data Retention
Children’s Privacy
Changes to This Policy
Contact Us

1. Who We Are

Project Tracker is an AI-powered project management and team collaboration platform available at www.project-tracker.in. References to “Project Tracker”, “we”, “our”, or “us” in this policy refer to the Project Tracker platform and its operators.

Privacy questions: privacy@project-tracker.in.

2. Data We Collect

We collect the minimum data required to provide a working, secure collaboration platform.

Account data — Name, email address, and a bcrypt-hashed password (your plain-text password is never stored).

Workspace data — Projects, tasks, subtasks, tickets, comments, file attachments, direct messages, channel messages, timesheets, reminders, and team structures you create within Project Tracker.

Usage data — Browser type, operating system, IP address, pages visited, and action timestamps for diagnostics and product improvement.

Push notification tokens — If you grant notification permission, we store your browser push subscription endpoint to deliver real-time alerts.

⚠️ We do not collect payment card data. All billing is handled by third-party PCI-DSS-compliant payment processors. We never see or store your card number.

3. How We Use Your Data

Service delivery — Running your workspace, syncing tasks, sending notifications, and powering all 12 modules.
Security — Verifying your identity, enforcing role-based access control, detecting suspicious logins, and supporting TOTP 2FA.
Product improvement — Understanding how features are used in aggregate (not individual profiling) to improve Project Tracker.
Communications — Sending transactional emails such as password resets, invite codes, and notifications you have opted into.
Legal compliance — Retaining records as required by applicable law.

We do not use your data for advertising, sell it to third parties, or use it to train machine-learning models without your explicit consent.

4. Data Storage & Security

All Project Tracker data is stored in a PostgreSQL database with encryption at rest and in transit. Access is restricted to engineering staff on a need-to-know basis.

Passwords are hashed with bcrypt (cost factor 12) — irreversible by design.
Sessions use HTTP-only, Secure, SameSite=Lax cookies with a 7-day expiry.
All traffic is encrypted via HTTPS/TLS 1.2+.
Tenant isolation — every query is scoped to your workspace ID. No workspace can access another workspace’s data.
TOTP 2FA — optionally enforced at the workspace level via Google Authenticator-compatible apps.

We do not sell or rent your personal data. We share data only in these limited circumstances:

Within your workspace — your name, avatar initials, and online presence are visible to colleagues in the same workspace.
Infrastructure providers — our cloud hosting and database providers process data under data processing agreements.
Legal obligations — if required by a valid court order or applicable law. We will notify you to the extent legally permitted.

6. AI Features & Your API Key

Project Tracker’s AI assistant is powered by Anthropic Claude. To use AI features, you provide your own Anthropic API key in Workspace Settings. This key is stored encrypted within your workspace configuration.

When you use the AI assistant, your message and relevant workspace context are sent to Anthropic’s API.
Project Tracker does not store your AI conversations beyond the current session.
Anthropic’s own Privacy Policy governs how they process data sent to their API.
You can remove your API key at any time from Workspace Settings, immediately disabling all AI features.

💡 Your API key is yours. We never share it with third parties and use it only to make calls on your explicit instruction.

7. Cookies & Sessions

Project Tracker uses a single session cookie to keep you logged in. This cookie is HTTP-only, Secure, SameSite=Lax, and valid for 7 days. We do not use third-party advertising cookies, tracking pixels, or analytics scripts that report to external services.

8. Your Rights

Access — Request a copy of the personal data we hold about you.
Correction — Update your name, email, or profile information directly within the app.
Deletion — Request deletion of your account and associated personal data.
Portability — Export your data via Settings → Export before deleting your account.
Objection — Object to certain processing. Note that some processing is necessary to deliver the service.

To exercise any of these rights, email privacy@project-tracker.in. We respond within 30 days.

9. Data Retention

We retain your personal data for as long as your account is active. On account deletion: personal profile data is deleted within 30 days; workspace content may remain in backups for up to 90 days before permanent deletion; anonymised usage statistics may be retained indefinitely.

10. Children’s Privacy

Project Tracker is a professional tool and is not directed at children under 16. If you believe a minor has registered, contact privacy@project-tracker.in and we will promptly delete the account.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify Workspace Admins by email and display a notice in the application at least 14 days before changes take effect.