Privacy Policy

1. Information We Collect

We collect the following types of information when you use Projavo:

• Account information: name, email address, username, and password hash when you register. If you sign in via Discord OAuth, we receive your Discord username and profile picture.
• Organization data: organization names, slugs, logos, and membership information you create or join.
• Project data: boards, lists, cards, comments, labels, attachments, and activity logs you create within the Service.
• Usage data: IP address, browser type, pages visited, and timestamps for security and service improvement purposes.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage sessions
• Enforce organization-level access control and permissions
• Send transactional emails (password resets, account notifications)
• Monitor and prevent abuse, fraud, and security threats
• Comply with legal obligations

3. Data Storage and Security

Your data is stored in secure databases with encryption at rest and in transit. All queries are scoped to your organization: we enforce row-level security so that data from one organization is never accessible to another. Sessions are managed securely with Better-Auth, and passwords are hashed using industry-standard algorithms.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share information only in the following circumstances:

• With your consent or at your direction
• With service providers who assist in operating the Service (hosting, email delivery)
• When required by law, regulation, or legal process
• To protect the rights, safety, or property of Projavo, our users, or the public

5. Cookies and Local Storage

We use cookies and local storage for authentication sessions, theme preferences, and sidebar state. We do not use third-party tracking cookies or advertising cookies. Essential cookies are required for the Service to function.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information in your account settings
• Delete your account and associated data
• Export your data upon request
• Withdraw consent for optional data processing

To exercise any of these rights, contact us at support@projavo.com.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions or concerns about this Privacy Policy? Contact us at support@projavo.com.