We collect what we need to run the product (your account, your projects, your participants' contact info). We don't sell data. We don't run third-party ad pixels on the app. Your project content is yours; we touch it only to deliver the service.
Your name, email, hashed password, optional phone, workspace memberships. Required to log you in and identify you.
Posts, attachments, milestones, scheduled messages, participant contact records you create. Stored in our database, encrypted at rest at the volume level, transmitted over HTTPS. When you connect your own Google Drive, file content lands there directly — we never persist the bytes.
For every email or SMS we send on your behalf: timestamp, recipient, channel, delivery status. Used for the per-recipient delivery indicators in the app and for debugging.
Standard server logs (IP, user-agent, timestamp, requested URL) for security monitoring. Rotated within 30 days unless tied to an active incident.
We use these third parties to run the service. Each is bound by their own data-processing terms:
You can export every project from the app (Settings → Export ZIP). You can delete your workspace from your profile, which soft-deletes your data and starts a 30-day purge window. Email for any GDPR / CCPA / data-portability request.
We'll email account owners before any material change takes effect.