Privacy Policy

Last updated: December 15, 2024

1. Introduction

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our OKR platform ("Service").

2. Information We Collect

We collect information that you provide directly to us:

  • Account Information: Name, email address, password, job title
  • Organization Data: Organization name, team structure, member information
  • OKR Content: Objectives, key results, status updates, comments
  • Usage Data: Login times, feature usage, browser type, IP address
  • Payment Information: Billing address, payment method (processed by Stripe)

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent or unauthorized activity
  • Personalize and improve your experience

4. Information Sharing

We do not sell your personal information. We may share information:

  • With your consent or at your direction
  • With service providers who assist in our operations (e.g., payment processing, email delivery)
  • To comply with legal obligations
  • To protect our rights, privacy, safety, or property
  • In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, and access controls.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data at any time.

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data
  • Portability: Request transfer of your data to another service
  • Objection: Object to processing of your data
  • Restriction: Request restriction of processing

To exercise these rights, please contact us using the information below.

8. Cookies and Tracking

We use cookies and similar technologies to:

  • Essential Cookies: Required for the Service to function (authentication, security)
  • Analytics Cookies: Help us understand how you use the Service
  • Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

9. Third-Party Services

We use the following third-party services that may collect information:

  • Stripe: Payment processing
  • Google: Single sign-on authentication
  • Resend: Email delivery

Each service has its own privacy policy governing their use of your data.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at privacy@example.com

For European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • We process your data based on: consent, contract performance, legal obligations, or legitimate interests
  • You have the right to lodge a complaint with your local data protection authority
  • You may withdraw consent at any time without affecting prior processing

For California Users (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected and how it is used
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your privacy rights