PlanSprint Privacy Notice

PlanSprint values your privacy and is committed to protecting your personal information. This Privacy Notice explains what data we collect, how we use it, your rights, and how we safeguard your information.

We may collect the following categories of personal and usage information:

• Account Information: Name, email address, username, password (encrypted), team association, avatar.
• Usage Data: IP address, log files (browser and device info, timestamps), activity logs (task interactions, comments, status updates).
• Task & Project Details: Task descriptions, sprint points, estimated/actual hours, comments, attachments, Kanban board interactions.
• Communication & Standups: Standup answers, blockers reported, planning notes, effort estimations.
• Analytics Data: Participation rates, productivity trends, estimated vs actual hours, leave and attendance logs.
• Leave & Rewards Data: Leave applications, leave type/balance/status, rewards claimed, points earned, and voucher redemption activities.

Your data is processed for the following purposes:

• To provide, maintain, and improve the PlanSprint service.
• To facilitate team collaboration, analytics, sprint and task management, and leave/reward tracking.
• To personalize and enhance your user experience (e.g., by showing relevant Kanban tasks or analytics).
• To monitor participation, track blockers, manage rewards, and generate performance reports.
• To uphold security, prevent unauthorized access, and comply with legal obligations.

• Team Collaboration: Certain data (e.g., standup responses, task progress, comments, user profiles) may be visible to other authorized team members.
• Third-Party Services: We may share data with service providers (e.g., hosting, analytics, reward partners) solely for operating PlanSprint. They are required to uphold equivalent privacy protections.
• Compliance & Security: Data may be disclosed to comply with legal requirements, enforce policies, or protect PlanSprint, its users, or the public from harm.

PlanSprint implements industry-standard security measures, including:

• Encryption in transit (TLS/HTTPS) and at rest.
• Secure password storage with best practices (e.g., bcrypt or similar).
• Two-factor authentication for users (where implemented).
• Regular security reviews and updates.
• Role-based access control to restrict data by team, project, and user role.

No method of transmission or storage is completely secure; we strive to use the best available protections.

PlanSprint uses cookies and similar technologies for authentication, retaining user preferences (like Kanban filters), analytics, and to ensure smooth service delivery. You can manage your cookie preferences via your browser settings.

Depending on your jurisdiction (such as under GDPR or local data laws), you may have rights to:

• Access, update, or correct your personal information.
• Delete your account and associated data.
• Object to or restrict certain data processing.
• Export your data in a portable format.
• Withdraw consent (where applicable).

To exercise your rights, contact [support or data protection officer contact method].

We retain your information as long as your account is active or as needed to provide services, comply with obligations, resolve disputes, and enforce agreements. Data related to completed sprints, tasks, or rewards may be archived or anonymized upon account deletion.

Your data may be processed and stored in locations outside your region. We ensure such transfers comply with legal requirements and apply adequate safeguards.

We may update this Privacy Notice to reflect changes in law or our service. Material changes will be communicated via email or in-app notification.

For questions, concerns, or to request your data, contact our support team at [contact email/phone].

Note: This draft reflects industry-standard privacy practices and the specific PlanSprint features you provided. For formal implementation, consult legal counsel to ensure compliance with relevant laws (such as India's data protection law, GDPR, and other local requirements).