Privacy Policy

The short version

Projectri collects what it needs to run a workspace for your organization, and nothing for advertising. We do not sell personal data. We do not track you across other companies’ apps or websites. Direct messages and encrypted channels are end-to-end encrypted and we cannot read them.

Your organization controls the workspace and the data inside it. For that data we act as a processor on their behalf; for your account itself we are the controller.

What we collect

• Account information — your name, email address, optional phone number, job title, time zone, profile photo or generated avatar, and your username.
• Workspace content — the tasks, projects, documents, files, comments, boards, forms, time entries and messages you create or that are shared with you.
• Usage and diagnostics — pages and screens opened, actions taken, errors and crash reports, and the approximate timing of requests. Used to operate, secure and improve the Service.
• Device and connection data — IP address, browser or app version, operating system, device model, and the identifiers your device reports for push notifications.
• Security records — sign-in attempts (successful and failed) with their IP and user agent, the devices you have linked and approved, and administrative actions taken in your workspace.
• Content you choose to give a permission for — photos you pick for an avatar or an attachment, files you attach, camera use when scanning a device-linking code, and microphone and speech audio when you talk to Nia or dictate.

What we do not collect

• We do not use advertising identifiers and we do not ask for tracking permission, because we do not track you across other companies’ apps or websites.
• We do not collect precise location. No feature in Projectri requests location access.
• We do not read your contacts or your calendar unless you connect an integration that explicitly asks for it.
• We do not read the contents of your direct messages or encrypted channels. We cannot — see "Encryption" below.

How your permissions are used

• Photos — only when you tap to choose one, for a profile picture or an attachment. We do not scan or index your photo library, and we ask for read access to the item you pick rather than the whole library where the platform offers that.
• Camera — only to scan the QR code shown by a device you are linking to your account.
• Microphone and speech recognition — only while you are holding a conversation with Nia or dictating into a field. Audio is streamed for transcription and is not retained as a recording afterwards.
• Notifications — to deliver mentions, assignments, reminders and messages. You control which of these are sent in Settings; the device’s own permission still governs whether a banner may appear.
• Face ID / Touch ID / biometrics — used by your device to unlock the app when App Lock is on. The biometric itself never leaves your device and is never sent to us.

Why we use it

• To provide the Service — showing you your work, delivering messages, sending notifications you asked for.
• To secure it — detecting suspicious sign-ins, enforcing your organization’s security policy, keeping an audit trail.
• To support you — answering a support request, investigating a bug or a reported AI reply.
• To improve it — understanding which features are used, and where the product fails, in aggregate.
• To meet legal obligations — responding to lawful requests, keeping records we are required to keep.

Nia and our AI provider

When you ask Nia something, the relevant part of your workspace context and your question are sent to our AI provider (Anthropic) for processing, and the reply is streamed back to you. Content sent this way is processed to generate your answer and is not used to train the provider’s models.

If you report a Nia reply, that exchange is stored so our team can investigate it.

Nia is never given the contents of end-to-end encrypted conversations. It cannot be — the server does not hold the keys.

Encryption

Everything is encrypted in transit with TLS, and at rest by our hosting and database providers.

Direct messages and encrypted channels go further: they are end-to-end encrypted between the devices you have approved, using keys generated on those devices. We store only ciphertext and cannot decrypt it. This means we cannot read those messages, cannot produce them in response to a request for them, and cannot recover them for you if you lose access to every approved device and recovery option.

Who we share it with

We do not sell personal data, and we do not share it for advertising. We share it with:

• The people in your workspace, as your sharing and your organization’s permissions determine.
• Your organization’s administrators, who can see workspace content, membership and audit records.
• Service providers who run parts of the Service for us under contract — hosting and database, file storage, email delivery, push notification delivery (Apple and Google), and our AI provider. Each is bound to use the data only to provide their service to us.
• Authorities, where we are legally required to. Where we are permitted to tell you, we will.
• An acquirer, if the business is bought or merged — with notice, and the same commitments carrying over.

Where it is stored, and for how long

Data is hosted in the United States and the European Union depending on the provider. Where data moves across borders, we rely on Standard Contractual Clauses or an equivalent lawful mechanism.

Workspace content is kept for as long as your organization keeps its workspace. Deleted items go to a recoverable state first and are purged afterwards. Security records such as sign-in history and audit logs are kept for up to 24 months. Backups roll off within 35 days.

Your rights

Depending on where you live, you may have the right to access, correct, export, delete or restrict the processing of your personal data, and to object to it. You can exercise most of these directly:

• Access and correct — Settings holds your profile; edit it there at any time.
• Export — your organization’s administrators can export workspace data; write to us and we will help.
• Delete — see "Closing your account" below, or write to privacy@projectri.com.

Closing your account

Projectri accounts belong to a workspace, and workspace content — the tasks you were assigned, the comments you left, the documents you wrote — belongs to the organization that created it. So closing an account is a request your organization’s administrators complete, not a button that erases a shared workspace from underneath your colleagues.

You can start it from inside the app: Settings → Account → Close my account. That does three things immediately — it records your request, it notifies every administrator of your workspace, and it emails our team so we can make sure it gets done. Your administrators then remove your membership, and we delete your account.

If your workspace has no reachable administrator, or nothing has happened within 30 days, write to privacy@projectri.com and we will complete the deletion ourselves.

When your account is deleted we remove your profile, your credentials, your devices and encryption keys, your notification tokens and your sign-in history. Content you contributed to a shared workspace stays with the organization, attributed to a removed user, unless the organization asks us to remove it too. End-to-end encrypted messages become permanently unreadable, because the keys are destroyed with your devices.

Children

Projectri is a workplace product and is not directed at children under 16. We do not knowingly collect their data. If you believe a child has an account, write to us and we will remove it.

Changes to this policy

We will post changes here and update the version at the top. When a change is material, we will ask you to review and accept it the next time you open Projectri.

Contact

Write to privacy@projectri.com with any question about this policy or about your data, including a request to access or delete it. We answer within 30 days.