Privacy

Last updated: October 2026

This policy explains what information Projects ("we", "us") collects when you use Projects, why we collect it, and the choices you have.

Who is responsible

Projects runs Projects and is responsible for the personal information described here. Your organisation (the company that invited you or signed up) decides what work information it keeps in Projects; for that information we act on its behalf.

What we collect

• Account details: your name, email address, a securely hashed password (we never store the password itself), and, if you use Google or Microsoft to sign in, the identifier those services give us.
• Work information your organisation adds: projects, tasks, time entries, files, comments, contacts, proposals, invoices and emails that your organisation connects or uploads.
• Connected mailboxes: if you connect a Google or Microsoft mailbox, we read and store the messages needed for the features you turn on. Access tokens are stored encrypted. You can disconnect a mailbox at any time.
• Usage and security information: sign-in times, IP address, browser type and actions taken in the app, kept to protect accounts and to help with support.

How we use it

• To provide Projects: sign you in, show your organisation's work, send the notifications you choose.
• To keep the service secure: detect unusual sign-ins, prevent abuse, and keep audit records.
• To support you when you ask for help.
• To bill your organisation for its plan.

We do not sell personal information, and we do not use your organisation's work data to advertise to you.

AI features

When your organisation turns on AI features, the text needed for a request (for example an email to summarise) is sent to the AI provider your organisation chose, only to produce that answer. AI results are drafts that a person reviews.

Service providers

We use trusted providers to run Projects, such as cloud hosting and file storage, email delivery, payment processing, and, when switched on, AI providers. They may only use the information to provide their service to us.

Where information is kept, and for how long

Information may be stored and processed in Canada, the United States or other countries where our providers operate. We keep it while your organisation's account is active. When an organisation closes its account, its data is deleted within 90 days, except where the law requires us to keep records longer (for example invoices).

Your choices and rights

You can see and update your profile in the app. You can ask us for a copy of your personal information, or ask us to correct or delete it, by writing to us through your account administrator. For work information that belongs to your organisation, we may refer your request to your organisation's administrator.

Security

Every organisation's data is kept separate, connections are encrypted, passwords are hashed, and stored secrets are encrypted. No system is perfectly secure, so please use a strong, unique password.

Changes

If we change this policy in a way that matters, we will let you know in the app or by email before the change takes effect.

Contact

Questions about privacy: us through your account administrator.