Privacy Policy

1. Who we are

WhereIsMyProject (“we”, “us”, “our”) operates the website whereismyproject.com and the WhereIsMyProject service. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our service.

2. Data we collect

Account data

When you sign up we collect your email address, name, and authentication credentials (or tokens from Google OAuth). If you upload a logo or set brand colors, we store those as well.

Project data

Project names, phase names and descriptions, status updates, quick updates, client names, and client email addresses you enter into the service.

Payment data

Payments are processed by Paddle, who acts as the Merchant of Record. We do not store credit card numbers. Paddle shares with us your subscription status and transaction identifiers.

Usage data

We use Vercel Analytics to collect anonymous, aggregated page-view and performance metrics. No cookies are set by this service, and no personal data is collected through it.

Transactional email data

When the service sends emails on your behalf (status change notifications, quick updates, weekly digests), we use Resend to deliver them. Resend processes the recipient’s email address, the email content, and delivery metadata (opens, bounces).

3. How we use your data

• To provide and maintain the service
• To send transactional emails you or your plan enables
• To process payments via Paddle
• To display branded client-facing status pages
• To improve the service based on aggregated usage data
• To communicate with you about your account or the service

4. Data sharing

We do not sell your personal data. We share data only with:

• Supabase — database and authentication infrastructure
• Paddle — payment processing (Merchant of Record)
• Resend — transactional email delivery
• Vercel — hosting and anonymous analytics

Each sub-processor handles data according to their own privacy policies and applicable data protection laws.

5. Public status pages

When you create a project, its status page is publicly accessible at a shareable link (/p/{slug}). The following data is visible to anyone with the link: project name, client name, phase names and statuses, activity feed entries, your brand name, logo, and colors. Client email addresses are never shown on public pages.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and project data within 30 days, except where we are required by law to retain it.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and all associated data
• Export your data in a portable format
• Object to processing of your data for specific purposes

If you are located in the European Economic Area (EEA), you additionally have rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at hello@whereismyproject.com.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Vercel Analytics is cookie-free.

9. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), secure authentication via Supabase, and Row Level Security policies on our database ensuring users can only access their own data.

10. Children

WhereIsMyProject is not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the service. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy, contact us at hello@whereismyproject.com.