Privacy policy

1. Who we are

Alignr ("we", "us") provides a project-management web app for small teams — boards, sprints, retrospectives and analytics. This policy explains what personal information we handle when you visit our website or use the app, and the choices you have.

If you use Alignr through an organization (your employer or client), that organization decides what goes into its workspace. For that content we act on its behalf; for your own account details we decide how they're used.

2. Information we collect

• Account details: your email address, display name and a password (stored only as a salted hash by our authentication provider) or a one-time sign-in link.
• Workspace content you or your teammates add: boards, tickets, descriptions, comments, subtasks, labels, attachments, sprint and retrospective notes, and the activity history around them.
• Organization and membership details: workspace name, logo and colors, who belongs to which team, and each person's role.
• Billing information: when you subscribe, our payment provider collects your payment details. We receive only a customer and subscription reference, your plan, the number of seats and the renewal date — never your card number.
• Usage and technical data: pages and features used, device and browser type, IP address and error logs, collected through our hosting provider and, on our public website, Google Analytics.
• Emails we send you (sign-in and confirmation links, invitations, notifications) and whether they were delivered.

3. How we use it

We do not sell your personal information, and we do not use the content of your workspace to train AI models.

• To provide and secure the service: sign you in, show your team's work, send invitations and notifications, and prevent abuse.
• To bill you and manage your subscription and seat count.
• To keep the service working and improve it — fixing errors, measuring performance and understanding which features are used.
• To respond to support requests and communicate important service or policy changes.
• To meet legal obligations.

4. Who we share it with

We use a small number of service providers to run Alignr. They may process your information only to provide their service to us:

• Supabase — database, authentication and file storage.
• Vercel — application hosting and delivery.
• Resend — sending transactional email such as sign-in, confirmation and invitation messages.
• LemonSqueezy — payment processing and subscription billing (they act as the seller of record and have their own privacy policy).
• Google Analytics — anonymous-style usage statistics on our public website.
• Upstash — short-lived caching of analytics results, where enabled.

5. What other people in your workspace can see

Members of your organization can see your name, email address, role and the work you do in shared workspaces — assigned tickets, comments and activity. Organization owners and admins can see all teams and members. People invited to a team can see that team's boards.

6. Cookies and similar technologies

We use cookies that are strictly necessary to keep you signed in and remember your current team. We also store a few display preferences (theme, sidebar and density) in your browser's local storage; these never leave your device. Our public website uses Google Analytics cookies to measure traffic — you can block them in your browser settings or with a tracking-protection extension.

7. How long we keep it

We keep your information while your account or workspace is active. Tickets moved to Trash are kept so they can be restored until they are permanently removed. When a workspace is deleted or you ask us to erase your data, we delete it from our live systems and it drops out of routine backups within a reasonable period. We may keep limited records where the law requires it (for example billing records).

8. Security

Data is encrypted in transit and stored with access controls so each organization can only reach its own data. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect unauthorized access.

9. Your choices and rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email us at hello@alignr.app. Where you're part of an organization's workspace, we may need to direct the request to that organization. You can also complain to your local data-protection authority.

10. International transfers

Our providers operate data centers in several countries, so your information may be processed outside the country where you live. Where required, we rely on appropriate safeguards for those transfers.

11. Children

Alignr is built for workplaces and is not directed at children under 16. We don't knowingly collect their information; if you believe we have, contact us and we'll delete it.

12. Changes to this policy

We may update this policy as the product or the law changes. We'll change the date at the top and, for significant changes, notify you in the app or by email.

13. Contact

Questions about privacy? Email hello@alignr.app.