1. Scope
This Privacy Policy explains how DataPlan collects, uses, discloses, and safeguards personal data when you use our website, product, and related services.
2. Information We Collect
We may collect the following categories of information:
- Account information: name, email address, organization, and role.
- Workspace content: tracking plans, field values, comments, mentions, and change history entries.
- Usage data: feature interactions, session activity, and device/browser metadata.
- Support communications: messages, attachments, and requests submitted to support channels.
- Billing data: subscription and transaction records processed by payment providers.
3. How We Use Information
We use personal data to:
- Provide, maintain, and secure DataPlan services.
- Enable collaboration features such as comments, mentions, and shared workspace activity.
- Generate product insights and recommendations based on workspace plan data.
- Administer accounts, subscriptions, billing, and support.
- Detect abuse, enforce terms, and meet legal obligations.
4. Legal Bases for Processing
Where required by applicable law, we process personal data under one or more legal bases:
- Performance of a contract with you or your organization.
- Legitimate interests such as product security and service improvement.
- Compliance with legal obligations.
- Consent, where consent is required.
5. Sharing and Disclosure
We may share information with:
- Service providers that host infrastructure, analytics, customer support, and billing operations.
- Your workspace administrators who control user access in your organization.
- Regulators or legal authorities when required by law.
We do not sell personal information.
6. Data Retention
We retain personal data for as long as needed to provide the service, meet contractual obligations, resolve disputes, enforce agreements, and satisfy legal requirements. Retention periods vary based on data type and regulatory obligations.
7. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal data. No system can be guaranteed fully secure, and you are responsible for protecting account credentials.
8. International Data Transfers
If data is transferred across jurisdictions, we use appropriate safeguards as required by applicable law.
9. Your Rights
Depending on your location, you may have rights to:
- Access, correct, or delete personal data.
- Object to or restrict certain processing.
- Request data portability.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us using the details below. Workspace members may also contact their workspace administrator.
10. Cookies and Similar Technologies
We may use cookies and similar technologies to keep sessions secure, remember preferences, and analyze product usage. You can manage cookie preferences through your browser settings.
11. Children's Privacy
DataPlan is not directed to children under 13 (or the minimum age required by local law), and we do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy periodically. If we make material changes, we will provide notice through the service or other appropriate channels.
13. Contact
For privacy questions or requests, contact: privacy@dataplan.app