Privacy Policy

1. What we collect

Account data (name, email, hashed password); workspace and project content you create; and operational logs (an audit trail of actions plus standard server logs). See the Cookie Policy for browser data.

2. How we use it

Solely to provide the Service: authenticating you, storing and displaying your data, sending transactional email, and generating the AI drafts, reports, and answers you request. We do not sell personal data or use it for advertising.

3. AI processing

When you use an AI feature, relevant project records are sent to our AI provider (Anthropic), scoped to your workspace, to generate the response. Under our terms with Anthropic this data is not used to train their models.

4. Subprocessors

DigitalOcean (hosting/database), Anthropic (AI), and Twilio SendGrid (email). See the Data Processing Agreement.

5. Connected integrations and Google user data

Planquora lets you optionally connect third-party services (such as Google Calendar, Slack, Microsoft Teams, GitHub, and Jira) so it can sync your project information to and from those tools. We access data from a connected service only after you authorize the connection, and only to provide the features you request.

Google Calendar: if you connect Google Calendar, Planquora requests the Google Calendar events scope (https://www.googleapis.com/auth/calendar.events) and your basic profile identity (email/OpenID) to identify the connected account. We use this access solely to create and update calendar events that mirror your Planquora project meetings and milestones. We do not read your unrelated calendar events for any other purpose.

Storage and protection: the credentials Google issues (an OAuth refresh token) are encrypted at rest and used only to perform the sync you configured. We do not sell this data, do not use it for advertising, and do not use Google user data to develop, improve, or train generalized AI/ML models.

Planquora’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Revoking access: you can disconnect an integration at any time from the project’s Integrations tab in Planquora, or revoke Planquora’s access directly from your Google Account at https://myaccount.google.com/permissions. Disconnecting stops future syncing and deletes the stored credential.

6. Security

Encryption in transit and at rest; role-based access; append-only audit trail; hashed passwords. Integration credentials are additionally encrypted at the field level. See the Security Policy.

7. Retention and deletion

We retain data while your account is active. On request we delete your account and workspace data, subject to short backup-cycle windows and legal obligations.

8. Your rights

You may access, correct, export, or delete your personal data. California residents have additional rights described in the California Privacy Notice. Contact [email protected]; we respond within 30 days.

9. Children

The Service is not directed to children. See the Children’s Privacy Policy.

10. Changes

Material changes will be announced in the app before taking effect.