Privacy Policy

1. Who we are

Pontea ("we", "our", "the Service") is a project management tool for freelancers and their clients. The service is operated by an individual developer based in Italy. Contact: mikhail@pontea.io

2. Data we collect

• Account data: name, email address, hashed password (we never store your password in plain text).
• Project and task data: project names, task titles, descriptions, deadlines, status, attachments you upload.
• Usage data: we use a functional cookie (lang) to remember your preferred language. We also run Vercel Web Analytics, which records anonymous page views (page path, referrer, country, device type) to tell us which pages people find useful. It sets no cookie, stores no identifier, and cannot be used to recognise you across visits or sites. No advertising or cross-site tracking of any kind.
• Consent record: date and fact of acceptance of these Terms.
• Waitlist data: if you join the PRO waitlist, we store the email address you submit, the interface language at the time, and a salted, irreversible hash of your IP address (used only to rate-limit the form against automated abuse — we never store the address itself).

3. Legal basis for processing (GDPR)

• Contract performance — to provide the service you signed up for.
• Consent — for processing your personal data at registration, and for contacting you about the PRO launch if you joined the waitlist. You can withdraw either at any time.
• Legitimate interests — to maintain security, prevent abuse, and understand aggregate, anonymous usage of the site so we can improve it.

4. Data storage

Your data is stored on Supabase (database and file storage) and served via Vercel (hosting). We aim to use EU data centres (Frankfurt region) where available. Both providers are GDPR-compliant and process data under Standard Contractual Clauses where required.

5. Data sharing

We do not sell or share your personal data with third parties for marketing purposes. Data is shared only with infrastructure providers (Supabase, Vercel) as necessary to operate the service, and with other project members you explicitly collaborate with.

6. Your rights (GDPR)

Under EU data protection law you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — delete your account and associated personal data (available directly in the app via Account settings → Delete account).
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any right, contact us at mikhail@pontea.io. You may also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

7. Data retention

We retain your data for as long as your account is active. When you delete your account, your personal data (name, email) is removed immediately. Task content is anonymised (author reference removed) to preserve project history for other members.

8. Cookies

We use one functional cookie: lang to store your language preference. This cookie is strictly necessary for the service to function as expected and does not require consent under the ePrivacy Directive. We do not use advertising or tracking cookies. Our analytics (see section 2) are cookieless — they store nothing on your device, which is why this site shows no cookie banner.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice in the app. Continued use after the effective date constitutes acceptance of the updated policy.