Privacy Policy

1. Information We Collect

Information you provide

• Account information — when you sign in via Google, we receive your name, email address, and profile photo from that provider.
• Profile information — username, bio, location, and any other details you add to your profile.
• Board content — board names, and the titles and notes on the cards you create, together with who a card is assigned to and who last moved it.
• Invitations — if you enter an email address when creating a board invite, we store it alongside that invite so the board owner can see who it was meant for. We do not send anything to it, and we use it for nothing else. ActualWork sends no email at all: an invite is a link that you copy and send yourself. The address is erased the moment the invite is claimed, and a board owner can withdraw an unclaimed invite, which deletes the address with it.

Information collected automatically

• Server logs — our infrastructure providers keep standard request logs, which include your IP address, your browser's user-agent string, and the time of the request. We use these for security and debugging, and they are kept for as long as those providers retain them.
• Cookies — session cookies that keep you signed in, and a short-lived cookie that returns you to the page you were heading for after you sign in. We set no others.

We run no analytics. There is no product analytics, tracking pixel, advertising network, or third-party tracking cookie anywhere on this site. We do not record which pages you visit, which features you use, or how long you spend on them.

2. How We Use Your Information

• To create and manage your account
• To share your boards and cards with the people you invite to them
• To display your public profile to other users
• To maintain platform safety and prevent fraud
• To comply with legal obligations

3. Information Sharing

We do not sell your personal information. We share your information only in these circumstances:

• Other users — your profile is visible to anyone signed in to ActualWork. The cards on a board, including who they are assigned to, are visible to every member of that board. Your email address is never shown to other users.
• Service providers — we use Supabase for database and authentication infrastructure, and Netlify to host and serve the site. Their privacy policies apply to data processed on their platforms.
• OAuth providers — when you sign in via Google, that provider's privacy policy governs the data it collects.
• Legal requirements — we may disclose information if required by law or to protect the rights and safety of our users.

4. Data Retention

We keep your personal information while your account is open.

When you ask us to close your account we delete your profile and your board memberships, and we detach your name from every card you created, were assigned, or last moved. Those cards stay on the board for the people you shared it with, with nothing linking them to you. We do this within 30 days, except where we have to keep something to meet a legal obligation.

One thing has to happen first. A board is never left without an owner, so if you are the only owner of a board you must either make another member an owner or delete that board before your account can be closed. Get in touch and we will work through it with you — we will not quietly delete a board other people are still using.

5. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

To exercise these rights, contact us at privacy@actualwork.app.

6. Security

We implement industry-standard security measures including encryption in transit (TLS), row-level security on our database, and OAuth-based authentication. However, no system is completely secure and we cannot guarantee absolute security of your data.

7. Children's Privacy

ActualWork is not intended for users under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you become aware that a child has provided us with personal information, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us at privacy@actualwork.app.