Privacy Policy

01.Introduction

SperaSync ("we", "our", "us") is a project management SaaS platform. This Privacy Policy explains how we collect, use, store and protect your personal information when you use SperaSync at sperasync.com. We are committed to protecting your privacy and handling your data with transparency and care.

02.Information We Collect

• Account information: Your name, email address and password when you register or are added to a workspace.
• Workspace data: Projects, tasks, comments, file attachments and any content you create within SperaSync.
• Usage data: Pages visited, features used, session duration and interactions within the platform - collected via PostHog and Vercel Analytics.
• Technical data: IP address, browser type, device type, operating system and error logs collected via Sentry for debugging.
• Communication data: Emails you send through our contact form on the landing page.
• Payment information: We do not store payment details. All payments are handled offline or through secure third-party payment processors.

03.How We Use Your Information

• To provide and operate the SperaSync platform and all its features.
• To send transactional emails including welcome emails, password reset links and subscription expiry reminders.
• To respond to your inquiries and provide customer support.
• To monitor platform performance, debug errors and improve our service.
• To analyze usage patterns and understand how users interact with the platform.
• To enforce our Terms of Service and prevent abuse of the platform.
• To send important service announcements - we do not send marketing emails without your consent.

04.Data Storage and Security

• All data is stored on Supabase (PostgreSQL) hosted on AWS infrastructure with industry-standard encryption at rest and in transit.
• File attachments are stored on Supabase Storage with access controlled at the bucket level.
• Your password is never stored in plain text - it is hashed using bcrypt before storage.
• We use Row Level Security (RLS) policies to ensure workspace data is completely isolated between different clients.
• All data transmission uses HTTPS with TLS encryption.
• We use Vercel for hosting which provides DDoS protection and automatic HTTPS.
• Access to production systems is restricted to authorized personnel only.

05.Data Sharing

• We do not sell, rent or trade your personal information to any third party.
• We share data only with the following service providers who help us operate SperaSync: Supabase (database and storage), Vercel (hosting), Google (Gmail SMTP for emails), PostHog (analytics), Sentry (error tracking).
• Each service provider has their own privacy policy and is bound by data processing agreements.
• We may disclose your information if required by law or to protect the rights and safety of our users.
• In the event of a business transfer or merger, your data may be transferred as part of the business assets - you will be notified before this occurs.

06.Client View Data

When workspace admins share a client view link, anyone with that link can view the project board without logging in. The client view exposes only the specific project data - task names, descriptions, statuses, priorities, due dates, attachments and comments. It does not expose user emails, other projects or any workspace settings. Workspace admins can revoke client view links at any time.

07.Cookies

• We use essential cookies to maintain your login session. Without these cookies the platform cannot function.
• We use analytics cookies from PostHog and Vercel Analytics to understand how the platform is used. These cookies do not contain personally identifiable information.
• We do not use advertising or tracking cookies.
• You can manage cookie preferences in your browser settings. Disabling essential cookies will prevent you from logging in.
• For full details see our Cookie Policy.

08.Your Rights

• Right to access: You can request a copy of all personal data we hold about you.
• Right to correction: You can request correction of inaccurate personal data.
• Right to deletion: You can request deletion of your account and all associated data.
• Right to data portability: You can request your data in a machine-readable format.
• Right to object: You can object to how we process your data in certain circumstances.
• To exercise any of these rights, email us at sperasync@gmail.com. We will respond within 30 days.

09.Data Retention

• Active account data is retained for as long as your workspace subscription is active.
• When a workspace is deleted, all associated data including users, projects, tasks and attachments is permanently deleted within 30 days.
• Audit logs are retained for 12 months for security purposes.
• Email communication records are retained for 6 months.
• You can request immediate deletion by contacting us at sperasync@gmail.com.

10.Children's Privacy

SperaSync is intended for use by businesses and professionals. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately and we will delete the information.

11.Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify workspace admins by email and update the "Last Updated" date at the top of this page. Continued use of SperaSync after changes constitutes acceptance of the updated policy.

12.Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy will be subject to the exclusive jurisdiction of the courts in India. We comply with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

13.Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us at sperasync@gmail.com or call +91 6302997508. We aim to respond to all privacy-related inquiries within 30 days.