Privacy Policy

This Privacy Policy explains how Pronaria (“we”, “us”) collects, uses, and protects your information when you use pronaria.com and our application at app.pronaria.com (the “Service”). By using the Service, you agree to the practices described here.

1. Information we collect

Information you provide. When you create an account or workspace, we collect your name, email address, and the content you create, including projects, tasks, messages, files you upload, and time you log.

Notification emails. To keep you informed, the Service can send email notifications that include previews of workspace content, such as task titles, comment text, and chat message previews (for example, when someone @mentions you). You can control which notifications you receive from your settings.

Usage information. Our marketing website at pronaria.com uses privacy-friendly analytics to understand aggregate usage (see Section 3). The application itself does not include page-view or feature-usage tracking.

Technical information. Our hosting platform automatically logs general access information, including IP addresses, browser type, and timestamps. These logs are not associated with your account and are used for security, abuse prevention, and system maintenance.

2. How we use your information

• To provide, maintain, and improve the Service
• To create and manage your account and workspaces
• To communicate with you about your account, support requests, and important updates
• To monitor for abuse, fraud, and security issues
• To understand, through aggregate analytics on our marketing website, how visitors use the site

We do not sell your personal information.

3. Analytics

We use Umami, a privacy-focused, cookieless analytics tool, to understand aggregate usage of our website. Umami is designed to measure usage without tracking you across other websites or building an advertising profile of you.

4. Payments

We use Stripe to process payments for paid plans. Stripe handles your card information directly; we never see or store your card details. Payment data is governed by Stripe’s privacy policy and is PCI DSS compliant.

5. Cookies and local storage

• Essential cookies: We use essential cookies so you can stay logged in and the Service functions correctly. Session cookies are set as httpOnly and protected against CSRF.
• Local storage: Your theme preference and your last-used workspace are stored locally in your browser so the app can apply your theme and route you to the right place on your next visit.
• No tracking or advertising cookies: We do not use advertising or cross-site tracking cookies.

6. Data retention

We keep your data for as long as your account and workspaces are active. When you delete specific data or your entire workspace, we remove it from our active systems, and any residual copies are purged from our backups within 10 days. Server access logs are retained only as long as needed for security and system maintenance.

7. Service providers

We rely on a limited set of trusted providers to operate the Service:

• Hosting: Our cloud hosting provider, located in the United States, stores and serves your data.
• Payments: Stripe, for processing payments.
• Analytics: Umami, for privacy-focused usage analytics.

These providers process data only on our behalf and as needed to deliver the Service.

8. Data security

We protect your data using industry-standard measures: all traffic is encrypted in transit over HTTPS/TLS, passwords are hashed with bcrypt, and access is tightly restricted. No method of transmission or storage is fully secure, but we work hard to protect your information.

9. International data transfer

Your data is hosted in the United States. If you access the Service from outside the United States, your information is transferred to and processed in the United States.

10. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export a copy of your data
• Object to or restrict certain processing

You can delete a workspace and all of its data directly from Workspace Settings. To delete your user account entirely, contact us at hello@pronaria.com and we will remove your account and personal data. For any other request, email us at the same address.

11. Children’s privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you. Continued use of the Service after changes take effect means you accept the updated policy.

13. Contact

If you have questions about this Privacy Policy or your data, email us at hello@pronaria.com.