Privacy Policy
Projiq ("we", "our", or "us") operates the project management platform at projiq.app. This policy explains what data we collect, how we use it, and the choices you have — written in plain English, not legalese.
Overview
Projiq is a cloud-based project management tool used by engineering and operations teams. When you register an organization, invite teammates, and manage projects, we process data on your behalf. We act as a data processor for content you create inside Projiq, and as a data controller for account and billing information.
Information We Collect
- Full name and work email address
- Organization name, industry, and team size
- Password (we never store your plaintext password — it is hashed before saving)
- Google account profile (if you sign in with Google)
- Subscription plan and billing country
- Projects, issues, tasks, comments, and attachments
- Sprint boards, Kanban columns, and workflow configurations
- Team member assignments and activity history
- IP address, browser type, and operating system
- Pages visited, features used, and session duration
- Error logs and performance metrics
- Timestamps for logins, project actions, and API calls
Payments are processed through Razorpay. We receive a transaction ID and subscription status but do not store your full card number or CVV. Razorpay's own privacy policy governs how they handle payment details.
How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Contract performance |
| Delivering the Projiq platform and its features | Contract performance |
| Processing subscription payments | Contract performance |
| Sending transactional emails (invites, password resets, receipts) | Contract performance |
| Improving and debugging the product | Legitimate interest |
| Security monitoring and fraud prevention | Legitimate interest |
| Sending product update emails (opt-out available) | Legitimate interest / Consent |
| Complying with legal obligations | Legal obligation |
We do not use your data to train machine learning models or sell insights to third parties.
Sharing & Disclosure
We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:
- Service providers: Infrastructure and tooling partners (cloud hosting, email delivery, payment processing) who are contractually bound to process data only on our instructions.
- Your organization: Admins in your Projiq organization can see member profiles, activity, and content within that organization.
- Legal requirements: If required by law, regulation, court order, or to protect the rights and safety of Projiq and its users.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy commitments.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, database, file storage | India / Global |
| AWS SES | Transactional email delivery | India |
| Razorpay | Payment processing | India |
| Google OAuth | Optional social sign-in | Global |
Storage & Security
Your data is stored on AWS infrastructure. We apply industry-standard safeguards:
- All data in transit is protected using industry-standard transport encryption
- Passwords are processed with a one-way cryptographic hash — we cannot reverse or read them
- Authentication sessions use signed, time-limited tokens that expire automatically
- Access to production systems is restricted to authorised personnel with MFA
- Regular automated backups are retained for 30 days
No method of transmission over the internet is 100% secure. We maintain reasonable safeguards and will notify affected users promptly if a breach occurs.
Cookies & Tracking
Projiq uses a small number of cookies and local storage entries:
- Session token: Required to keep you signed in. Expires when you log out or after 30 days of inactivity.
- Preferences: Theme (dark/light) and UI settings stored locally in your browser.
- CSRF protection: A short-lived token to prevent cross-site request forgery.
We do not use third-party advertising cookies or cross-site tracking pixels on the authenticated application. The marketing landing page at projiq.app may use basic analytics to measure page visits.
Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Update inaccurate or incomplete information from your account settings or by contacting us.
- Deletion: Request deletion of your account and associated personal data. Content shared within your organization may be subject to your organization admin's retention settings.
- Portability: Export your projects and issues as JSON or CSV from within the app.
- Objection: Opt out of non-essential communications from your account notification settings.
- Restriction: Request that we restrict processing of your data in certain circumstances.
To exercise any right, email us at privacy@projiq.app. We will respond within 30 days.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide the service:
- Account data: Retained until account deletion is requested. Deleted within 30 days of request.
- Project content: Retained while the organization subscription is active. Deleted 90 days after subscription cancellation.
- Billing records: Retained for 7 years to meet financial and tax reporting requirements.
- Server logs: Retained for 90 days for security and debugging, then deleted.
- Backups: Rolling 30-day backup window; data deleted from a backup after that backup expires.
Children's Privacy
Projiq is a professional business tool intended for use by adults in a workplace context. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has created an account, please contact us and we will promptly delete the account.
Changes to This Policy
When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Send an email notification to the admin of each active organization
- Display an in-app notice for 14 days after the change takes effect
Continued use of Projiq after a policy update constitutes acceptance of the revised terms.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please reach out: