Privacy Policy

1. Introduction

Inproma ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our project management platform and related services (the "Service"). By using Inproma, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information when you use our Service:

• Account information: name, email address, password (encrypted), organization name, and role
• Project data: projects, tasks, milestones, documents, communications, and other content you create within the platform
• Usage data: log data, device information, browser type, pages visited, and features used
• Integration data: when you connect third-party services (e.g., Jira, Microsoft Teams, Outlook, SAP), we access and store data from those services as authorized by you
• Payment information: billing details processed securely through our payment providers (we do not store credit card numbers directly)

3. Third-Party Integrations

Inproma integrates with third-party services to enhance your project management experience. When you connect an integration, we may access:

• Atlassian Jira: project data, issues, worklogs, and user profiles (scopes: read:jira-work, write:jira-work, read:jira-user)
• Microsoft Teams & Outlook: calendar events, email communications, and meeting data
• SAP: HR records, cost data, and timesheet entries
• SharePoint: document storage and collaboration data

Integration data is accessed only with your explicit authorization through OAuth consent flows. You can disconnect any integration at any time from your settings, which will stop further data synchronization. Previously synced data may be retained unless you request its deletion.

4. How We Use Your Information

• To provide, maintain, and improve the Inproma platform and its features
• To synchronize project data between Inproma and your connected third-party services
• To provide AI-powered insights, risk assessments, and project recommendations
• To send service-related notifications, updates, and support communications
• To ensure security, prevent fraud, and comply with legal obligations

5. Data Storage & Security

Your data is stored on secure servers with encryption at rest and in transit. We implement industry-standard security measures including role-based access control (RBAC), multi-tenant data isolation, audit logging, and regular security assessments. OAuth tokens for third-party integrations are stored encrypted and are never exposed through our API. Access to your data is strictly limited to authorized personnel and automated systems necessary to provide the Service.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or regulatory purposes. Integration tokens are immediately revoked upon disconnection.

7. Your Rights

Depending on your jurisdiction (including under the GDPR and similar regulations), you have the following rights:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your personal data
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing of your data for certain purposes

8. Cookies & Tracking

We use essential cookies to maintain your session, remember your language preference, and ensure the security of your account. We do not use third-party advertising or tracking cookies. Analytics cookies, if used, are anonymized and used solely to improve the Service.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@inproma.com or through our contact page.