Privacy Policy

1. Introduction

ProjectFlow AI by CallisonPMP ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our project management platform.

By using ProjectFlow AI by CallisonPMP, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

• Name and email address
• Organization information
• Contact details (phone number, location)
• Profile information and preferences
• Payment information (processed securely by third-party providers)

2.2 Project Data

• Projects, tasks, and requirements you create
• Documents and files you upload
• Comments and collaboration data
• Resource allocation and team information

2.3 Usage Information

• Log data (IP address, browser type, access times)
• Device information
• Feature usage and interaction data
• Performance and analytics data

3. GDPR Compliance

We are committed to compliance with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA).

3.1 Your Rights Under GDPR

• Right to Access: You can request a copy of your personal data
• Right to Rectification: You can correct inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can limit how we use your data
• Right to Data Portability: You can receive your data in a structured format
• Right to Object: You can object to processing of your data
• Right to Withdraw Consent: You can withdraw consent at any time

3.2 Legal Basis for Processing

We process your data based on:

• Contractual necessity (to provide our services)
• Legitimate interests (to improve and secure our platform)
• Your explicit consent (for marketing communications)
• Legal obligations (for compliance and reporting)

4. Data Protection & Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for data in transit (TLS/SSL)
• Encryption at rest for stored data
• Regular security audits and penetration testing
• Role-based access controls (RBAC)
• Multi-factor authentication (MFA) support
• Regular backups and disaster recovery procedures
• Employee training on data protection
• Secure data centers with physical security

4.1 Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time. After deletion request, data is removed within 30 days, except where retention is required by law.

5. How We Use Your Information

• To provide, maintain, and improve our services
• To process transactions and send related information
• To send administrative information and updates
• To respond to your inquiries and provide customer support
• To monitor and analyze usage and trends
• To detect, prevent, and address technical issues and security threats
• To send marketing communications (with your consent)
• To comply with legal obligations

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third parties who help us operate our platform (hosting, analytics, payment processing)
• Team Members: Other users within your organization for collaboration
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually bound to protect your data and use it only for specified purposes.

7. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience:

• Essential Cookies: Required for basic functionality and security
• Analytics Cookies: Help us understand how you use our platform
• Preference Cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings. Disabling cookies may limit some functionality.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for data transfers
• Binding Corporate Rules where applicable

9. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Your Choices

• Account Information: Update your profile and preferences in settings
• Communications: Opt-out of marketing emails via unsubscribe links
• Cookies: Manage preferences through browser settings
• Data Access: Request a copy of your data by contacting us
• Data Deletion: Request account and data deletion at any time

11. Disclaimer

11.1 Service "As Is"

ProjectFlow AI by CallisonPMP is provided on an "as is" and "as available" basis. We make no warranties, expressed or implied, regarding the platform's operation, accuracy, reliability, or availability.

11.2 No Guarantee

While we strive for accuracy, we do not guarantee that:

• The service will be uninterrupted or error-free
• All defects will be corrected
• The platform is free from viruses or harmful components
• Results from use will meet your requirements

11.3 Limitation of Liability

To the maximum extent permitted by law, ProjectFlow AI by CallisonPMP shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or other intangible losses resulting from:

• Your use or inability to use the service
• Unauthorized access to your data
• Third-party conduct or content on the service
• Any other matter relating to the service

11.4 AI Features

Our AI-powered features provide suggestions and analysis based on algorithms and machine learning. These should be used as guidance only. Users are responsible for verifying AI-generated content and making final decisions.

11.5 User Responsibility

You are responsible for:

• Maintaining the confidentiality of your account
• All activities under your account
• Compliance with applicable laws and regulations
• Accuracy of information you provide
• Regular backups of critical data

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we will provide prominent notice or obtain your consent as required by law.