Privacy Policy

Introduction

This Privacy Policy describes how QRonologic, LLC (“we,” “us,” or “our”) collects, uses, and protects your information when you use our tracker application (the “Service”). We are committed to protecting your privacy and ensuring transparency about our data practices.

Information We Collect

Information You Provide Directly

• Account Information: Name, email address, username, and password
• Profile Information: Profile picture, job title, company name, and other optional profile details
• Project Data: Tasks, projects, boards, comments, descriptions, due dates, and other content you create
• Files and Attachments: Documents, images, and other files you upload to the Service
• Communications: Messages, comments, and other communications within the platform

Information Collected Automatically

• Usage Data: How you interact with the Service, features used, time spent, and navigation patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Server logs, error reports, and performance metrics
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Enable collaboration features and team functionality
• Store and organize your projects, tasks, and files
• Send important notifications about your account and projects
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve our Service
• Ensure security and prevent fraud or abuse
• Comply with legal obligations

Information Sharing and Disclosure

Within Your Organization

• Team members you invite can access shared projects, tasks, and files
• Workspace administrators have access to workspace content and user activity
• Information is shared according to the permissions you set

With Third Parties

We may share your information with:

• Service Providers: Cloud hosting, email delivery, payment processing, bot protection (Google reCAPTCHA) and cookieless visit counting on our public pages
• AI Providers (optional): AI features are off by default. If your workspace turns one on and connects its own AI provider key (currently OpenAI), the content you send to that feature (an image, a voice note or a note) goes to that provider to produce the result. Nothing is sent to an AI provider unless your workspace enables it
• Business Partners: Integration partners (with your consent)
• Legal Requirements: When required by law, court order, or regulatory request
• Business Transfers: In connection with mergers, acquisitions, or asset sales

We Do Not

• Sell your personal information to third parties
• Share your content with unauthorized parties
• Use your data for advertising purposes outside our Service

Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS everywhere, with HSTS)
• Row-level security in the database, so each workspace’s data is isolated on every query
• Role-based access controls, scoped API keys and hashed passwords
• An audit trail of changes to your workspace’s records
• Hosting with established cloud providers and their physical security

Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide the Service
• Required by law or for legitimate business purposes
• You may ask us to delete your account and data at any time by contacting us

Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Update: Modify your account and profile information
• Delete: Request deletion of your account and associated data
• Export: Request your data in a portable format
• Restrict: Control how your information is processed
• Object: Opt out of certain data processing activities

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data during international transfers.

Children’s Privacy

Our Service is for adults: you must be at least 18 years old to create an account, as our Terms and Conditions require. We do not knowingly collect personal information from anyone under 18. If we discover such information has been collected, we will delete it promptly.

Third-Party Integrations

Our Service may integrate with third-party applications. This Privacy Policy does not cover the privacy practices of third-party services. We encourage you to review their privacy policies before connecting your account.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate your account
• Analyze usage and improve performance
• Provide security features

You can control cookie settings through your browser preferences.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting a notice in the Service
• Sending an email notification
• Updating the “Last Updated” date

Continued use of the Service after changes indicates acceptance of the updated policy.

Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Jurisdiction-Specific Rights

California Residents (CCPA)

California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information.

EU Residents (GDPR)

EU residents have rights under the General Data Protection Regulation including data portability, the right to rectification, and the right to lodge a complaint with supervisory authorities.