Privacy Policy

1. Information We Collect

We collect the following types of information when you use PMO Craft:

• Account information: Name, email address, and profile picture provided during registration
• Project data: Projects, tasks, documents, reports, and other content you create within the Service
• Usage data: Time entries, task estimates and assignments, and collaboration activity
• Technical data: Browser type, device information, IP address, and access timestamps
• Payment information: Billing details processed securely by our merchant of record (Paddle)

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Send transactional communications (invitations, account notifications)
• Respond to support requests
• Analyze usage patterns to improve the product

3. Third-Party Services

We use the following third-party services to operate PMO Craft:

• Supabase — Authentication and database hosting. Supabase processes your login credentials and profile information, and your project data is stored on Supabase's PostgreSQL infrastructure. Supabase Privacy Policy
• Replit — Application hosting and deployment. Replit Privacy Policy
• Paddle — Payment processing. Paddle.com is the merchant of record for paid plans: it handles checkout, invoicing and sales tax, and we never see or store your card details. Paddle Privacy Policy
• Resend — Transactional email delivery. Resend Privacy Policy

4. Data Storage and Security

Your data is stored on secure, encrypted servers. We use industry-standard security measures including HTTPS encryption in transit, encrypted databases at rest, and access controls to protect your information. While we take reasonable precautions, no method of transmission or storage is 100% secure.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and project data within 30 days, except where we are required by law to retain it. Aggregated, anonymized data may be retained indefinitely for analytics purposes.

6. Your Rights

You have the right to:

• Access your personal data stored in the Service
• Export your data at any time using the built-in export features
• Correct inaccurate personal information in your account settings
• Delete your account and associated data
• Object to processing of your data for certain purposes

To exercise any of these rights, contact us at privacy@pmocraft.com.

7. Cookies

We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Third-party services we integrate with may set their own cookies as described in their respective privacy policies.

8. Data Sharing

We do not sell, rent, or trade your personal information. We only share data with the third-party service providers listed above, and only to the extent necessary to operate the Service. We may disclose information if required by law or to protect our rights and the safety of our users.

9. Children's Privacy

PMO Craft is not intended for use by children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

11. Contact Us

The data controller for the Service is Strategy Advisor Consultoria e Treinamento Gerencial Ltda. (CNPJ 13.337.278/0001-09), SHN Quadra 1 Bloco A Conjunto A, Sala 1414, Asa Norte, Brasília, DF, 70701-000, Brazil, trading as PMO Craft. If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@pmocraft.com.