Privacy Policy
Effective [date]. Pro_ject is operated by There You Have It, LLC ("we", "us"). This policy covers the Pro_ject service at pro-ject.app and its workspaces at yourname.pro-ject.app.
Who Pro_ject is for
Pro_ject is a business tool. Each customer organization ("your organization") gets its own separate workspace and database. The organization controls who can sign in and what is stored there; we operate the service on its behalf.
What we collect
- Account and contact details you give us — name, work email, phone, company — when you request access, fill in the onboarding checklist, or are invited to a workspace by your organization.
- Business data your organization enters — clients, bids, estimates, projects, work orders, hours, files and notes. This data belongs to your organization.
- Data from services you choose to connect (see below) — QuickBooks Online, Google Calendar, Dropbox, Slack, EasyPost, Calendly, Microsoft 365 — only after an administrator in your organization connects them.
- Technical data — sign-in events, IP address, browser type, and error logs needed to run and secure the service.
How we use it
To provide and support the service, to secure it (sign-in, two-step verification, abuse prevention), to send service emails (invitations, notifications your organization has turned on, account notices), and to improve reliability. We do not sell personal information and we do not use your organization's business data for advertising.
Connected services
When an administrator connects a third-party service, Pro_ject accesses only what that feature needs, and only on your organization's behalf:
- QuickBooks Online — customers, estimates, invoices, purchases, time activities and projects, to keep accounting in sync.
- Google Calendar — to create and update calendar events for deadlines and scheduled work in calendars your organization selects.
- Dropbox — to create project folders and store files your organization chooses to keep there.
- Slack, EasyPost, Calendly, Microsoft 365 — notifications, shipment tracking, meeting scheduling and email intake respectively, each only when turned on.
You can disconnect any service at any time from inside Pro_ject; we then stop accessing it and delete the stored access credentials.
Google user data — Limited Use
Pro_ject's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google Calendar data only to provide the calendar features you see in Pro_ject; we do not transfer it to third parties except as needed to provide those features, with your consent, or for security or legal reasons; we do not use it for advertising; and humans do not read it except with your permission, for security, to comply with law, or in aggregated/anonymized form for internal operations.
Who can see your data
People in your organization, according to the roles your administrators set. Our staff do not have standing access to your workspace; we access it only with your organization's written consent for support, or where required by law. We use service providers to host and run Pro_ject (cloud hosting, database, file storage, email delivery, error monitoring) under agreements that restrict them to processing data on our instructions. [List the providers you use, e.g. Railway (hosting/database), Cloudflare (file storage, bot protection), Postmark (email), Sentry (error monitoring).]
Retention and deletion
Your organization's data is kept for as long as it has a workspace. When a workspace is closed, we provide a backup archive on request and delete the workspace and its files within 30 days, except where we must keep records by law. Access requests from people who are not yet customers are kept for [12 months].
Security
Data is encrypted in transit; stored credentials for connected services are encrypted at rest; administrators use two-step verification; each organization's data lives in a separate database. No system is perfectly secure — if we learn of a breach affecting your data we will notify your organization without undue delay.
Your choices and rights
You can see and change your own profile inside Pro_ject. For access, correction or deletion of personal data, contact your organization's administrator, or us at projectxtyhi@gmail.com. Depending on where you live you may have additional rights under local law; we will honor valid requests.
Children
Pro_ject is a workplace tool and is not directed to children under 16.
Changes
We will post updates here and, for material changes, notify organization administrators by email.
Contact
There You Have It, LLC · projectxtyhi@gmail.com · [postal address]