1. Information we collect
We collect information you provide when creating and managing an account, including your name, email address, contact preferences, and profile information.
We also process information you add while using the service, including:
- Project titles, descriptions, roadmaps, due dates, and attachments
- Time entries, work descriptions, and task associations
- Client recipient names and email addresses
- Progress updates, invoices, and payment-status records
- Client feedback submitted through public project pages
- Basic technical and usage information needed to secure and operate the service
2. How we use information
We use information to authenticate users, provide project and time-management features, prepare updates and invoices, deliver emails you approve, display client portals, create notifications, maintain security, diagnose problems, and improve the service.
3. AI processing
When you request or enable AI-assisted generation, relevant project information may be sent to an AI provider to prepare a progress-update or invoice draft. This can include work descriptions, time totals, reporting dates, and associated milestone, feature, and task information. Generated content remains subject to your review.
4. Service providers
We use service providers to operate the product, including Supabase for authentication, database, and file storage; Resend for transactional email delivery; and OpenAI for optional AI generation. These providers process information under their own privacy terms and security practices.
5. Client-facing pages
Public client portals are accessible to anyone who has the project’s unique URL. They display only the project information selected for client visibility, including aggregate current-period hours when enabled by the product. Private time-entry details, account settings, and internal billing controls are not shown. Clients may submit feedback, which is stored with the applicable project.
6. Email communications
We use account and client email addresses to send messages requested through the service, such as progress updates, invoices, and notifications that a draft is ready for review. Client-facing messages are not sent until the account holder approves them unless an explicitly described automatic-send feature is enabled.
7. How information is shared
We do not sell personal information. We share information with service providers as needed to operate requested features, with clients when you intentionally send or publicly share content, when required by law, or when necessary to protect rights, safety, and service integrity.
8. Retention and deletion
We retain information while an account is active and as reasonably necessary to provide the service, meet legal obligations, resolve disputes, and maintain security. Account deletion removes or schedules deletion of account information subject to legal, security, backup, and transactional-record requirements.
9. Security
We use reasonable administrative and technical safeguards, including authenticated private routes and database access controls. No online service can guarantee absolute security, so you should use a strong password and limit public-link distribution to intended recipients.
10. Your choices
You can update profile information, change project settings, disable automated draft generation, control public client pages, manage recipient addresses, and delete your account through the service. You may also request assistance through the contact or support channel made available within the service.
11. Children’s privacy
The service is intended for independent professionals and businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
12. Changes to this policy
We may update this policy as the service changes. We will revise the effective date and provide reasonable notice when changes are material.
13. Contact
Questions or requests concerning privacy may be submitted through the contact or support channel made available within the service.