Privacy Policy

This Privacy Policy describes how Planndora System (“Planndora”, “we”, “us”, or “our”) collects, uses, stores, and shares personal information when you visit our website, create an organization, or use our project and product management platform (the “Service”).

By using the Service, you acknowledge this Policy. If you use Planndora on behalf of an organization, that organization may control your workspace account and related content.

Planndora is a multi-tenant workspace for projects, issues, sprints, documentation, ideas, integrations, and related collaboration features. Platform administrators operate organization-level controls; workspace admins manage members, billing, and project access within their tenant.

• Contact for privacy requests: support@planndora.com
• Product website and application operated under the Planndora System brand

• Provide, operate, maintain, and improve Planndora features (projects, issues, watchers, documents, notifications, MCP/API access where enabled).
• Authenticate users, enforce roles and permissions, and manage organization membership.
• Process subscriptions, per-seat charges, prorations, renewals, receipts, and failed-payment retries via Stripe (and PayPal where offered).
• Send transactional email such as invites, verification, password reset, billing receipts, and important service notices.
• Detect, prevent, and investigate fraud, abuse, unauthorized access, and security incidents — including IP blocking when warranted.
• Respond to support requests and communicate product updates you opt into.
• Comply with legal obligations and enforce our Terms of Service.

If you are in a region that requires a legal basis for processing (for example the EEA/UK), we rely on one or more of: performance of a contract (providing the Service), legitimate interests (securing the platform, preventing abuse, improving reliability), consent (where we ask for it), and legal obligation.

• We do not sell personal information.
• Payment processors: Stripe (primary) and PayPal (when enabled) process payments, proration, invoices, and receipts under their own privacy policies.
• Infrastructure and service providers that help us host, store files, send email, monitor uptime, or analyze reliability — bound by contractual confidentiality and security obligations.
• Organization administrators and authorized members may access workspace content and member activity according to role permissions.
• Platform superadmins may access security logs, mail-usage logs, and IP blacklist controls needed to operate and secure the platform.
• We may disclose information when required by law, legal process, or to protect the rights, safety, and integrity of users and the Service.
• In connection with a merger, acquisition, or asset transfer, information may transfer subject to appropriate confidentiality protections.

Planndora uses a per-seat, prorated billing model powered primarily by Stripe. When seats are added mid-cycle, Stripe calculates prorated amounts; renewals charge for all active seats. Payment receipts and invoices are generated through the payment provider and may be emailed to the customer.

• Card and wallet details are entered on Stripe (or PayPal) hosted checkout / customer portal surfaces whenever possible.
• We store subscription and payment metadata needed for entitlements (plan, seats, status, period end, provider references).
• Failed payments may trigger provider retry logic and temporary restriction of paid features until resolved.

• We use cookies and local/session storage to keep you signed in, remember preferences, and support product functionality.
• Authentication tokens may be stored by the client according to your deployment’s security model; protect devices and do not share credentials.
• You can control cookies through browser settings. Disabling certain cookies may limit signed-in features.

• Account and workspace data are retained while your organization remains active or as needed to provide the Service.
• Security logs, email-usage logs, and IP blacklist records are retained for security, audit, and abuse-prevention purposes for a period appropriate to those purposes, then deleted or aggregated where feasible.
• Billing and payment records may be retained as required for accounting, tax, dispute resolution, and legal compliance.
• After account deletion or organization offboarding, we delete or anonymize personal data within a reasonable period, except where longer retention is required by law or legitimate business records.

• HTTPS/TLS for data in transit; hashed passwords; role-based access (superadmin, company admin, member) and project-level membership.
• Issue edit permissions further limited so members may view project issues but edit only when assigned (or when they are admins), reducing unnecessary write access.
• Security audit logging of sensitive actions; optional IP blacklist enforced on API requests.
• No method of transmission or storage is perfectly secure. Use strong unique passwords and protect account access.

• Depending on your location, you may have rights to access, correct, export, restrict, or delete personal data, or to object to certain processing.
• Update profile information in-app. Organization admins control membership; contact support@planndora.com for account or privacy requests.
• You may request logout-related audit recording via the product logout flow; discard tokens client-side after sign-out.
• Marketing communications (if any) can be opted out where offered; transactional and security messages remain necessary for the Service.

Planndora is built for professional and organizational use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided personal data, contact us and we will take appropriate steps.

Your information may be processed in countries other than where you live, including where our hosting providers and payment processors operate. Where required, we use appropriate safeguards for cross-border transfers.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective or “last updated” date. Continued use of the Service after changes become effective constitutes acknowledgment of the updated Policy.

For privacy questions, data requests, or security concerns, email support@planndora.com. We will respond within a reasonable time consistent with applicable law.