Privacy policy

1. Information we collect

Account information you provide directly: your name, email address, password (stored only as a secure hash), workspace name, and any profile details such as an avatar.

Workspace content you create: projects, tasks, invoices, client records, and files you upload. File uploads are stored in encrypted cloud storage.

Technical data required to operate the service: session cookies for authentication, IP address, and browser user-agent captured for security logging.

2. How we use information

To provide the service: authenticate users, show workspaces to authorized members and clients, deliver transactional email (verification, invitations, password resets), and store shared files securely.

We do not sell your personal data, and we do not use workspace content for advertising.

3. Data sharing

We share data only with processors necessary to run the service: our database hosting provider (Neon), file storage (Cloudflare R2), email delivery (Resend), and infrastructure providers. Each processes data solely on our instructions.

Client users you invite can see only the workspace data scoped to them — their own projects, files, tasks, and invoices.

4. Data retention & deletion

You can delete workspace records at any time from within the app. Deleting a workspace removes its associated data. Files deleted in the app are removed from storage.

If you want your account fully erased, contact us and we will delete it within 30 days, except where retention is legally required.

5. Security

Passwords are hashed, sessions are cookie-based and HTTP-only, and uploaded files are served only through short-lived signed URLs after authorization checks. We apply transport encryption everywhere.

6. Your rights

Depending on your jurisdiction (including GDPR regions), you may have rights to access, correct, export, or delete your personal data. Contact us through the contact page to exercise them.

7. Changes to this policy

If we make material changes we will notify you by email or in-app notice before they take effect.