Privacy Policy

1. Who we are

Pontea ("we", "our", "the Service") is a project management tool for freelancers and their clients. The service is operated by an individual developer based in Italy. Contact: mikhail@pontea.io

2. Data we collect

• Account data: name, email address, hashed password (we never store your password in plain text).
• Project and task data: project names, task titles, descriptions, deadlines, status, attachments you upload.
• Usage data: we use a functional cookie (lang) to remember your preferred language. No analytics or tracking cookies.
• Consent record: date and fact of acceptance of these Terms.
• Waitlist data: if you join the PRO waitlist, we store the email address you submit, the interface language at the time, and a salted, irreversible hash of your IP address (used only to rate-limit the form against automated abuse — we never store the address itself).

3. Legal basis for processing (GDPR)

• Contract performance — to provide the service you signed up for.
• Consent — for processing your personal data at registration, and for contacting you about the PRO launch if you joined the waitlist. You can withdraw either at any time.
• Legitimate interests — to maintain security and prevent abuse.

4. Data storage

Your data is stored on Supabase (database and file storage) and served via Vercel (hosting). We aim to use EU data centres (Frankfurt region) where available. Both providers are GDPR-compliant and process data under Standard Contractual Clauses where required.

5. Data sharing

We do not sell or share your personal data with third parties for marketing purposes. Data is shared only with infrastructure providers (Supabase, Vercel) as necessary to operate the service, and with other project members you explicitly collaborate with.

6. Your rights (GDPR)

Under EU data protection law you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — delete your account and associated personal data (available directly in the app via Account settings → Delete account).
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any right, contact us at mikhail@pontea.io. You may also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

7. Data retention

We retain your data for as long as your account is active. When you delete your account, your personal data (name, email) is removed immediately. Task content is anonymised (author reference removed) to preserve project history for other members.

8. Cookies

We use one functional cookie: lang to store your language preference. This cookie is strictly necessary for the service to function as expected and does not require consent under the ePrivacy Directive. We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice in the app. Continued use after the effective date constitutes acceptance of the updated policy.