Privacy policy
Last updated November 5, 2026
Short version: your projects are stored in our database in Germany, we do not sell anything about you, and analytics cookies and the advertising that pays for the free plan only start after you accept them.
Who we are
Planitude is a free online project management service. This page explains clearly and concisely what we collect and why.
What we collect
The account details you give us (email, name, a hash of your password), the projects you create or import, ordinary server logs (IP address, browser, timestamps) and, to protect access, the IP address and browser associated with your sessions and with calls made with API keys.
Why we collect it
To run your account, store and schedule your projects, keep the service secure, and — only with your consent — measure how the site is used and show advertising that pays for the free plan. We also send service emails with deadline reminders for tasks assigned to you: you can turn them off from your profile or with the link in every email.
Where the data is
In our PostgreSQL database on IONOS servers in Germany, inside the European Union. Encrypted backups of the database are also stored with Contabo GmbH (Munich, Germany), in its European Union object storage. Only the data needed for the services described below leaves the EU: the AI assistant when you use it, risk estimates, suggestions and planning checks (TypeSafe), service emails, internal notifications and the delivery and protection of the site (Cloudflare).
AI assistant
When you use the planning assistant or the AI chat in your projects, the text you type and the project data needed for the answer (project name, tasks with dates, durations, progress and dependencies, names of members and assigned people and, when the request requires it, notes, comments and change history) are sent to Anthropic, the provider of the language model (Claude Haiku 5.5), through its API to generate the answer. We do not send email addresses or passwords, and nothing is sent if you do not use these features. The service is provided to us by Anthropic Ireland, Limited (Dublin, Ireland), part of the group headed by Anthropic, PBC (San Francisco, United States), which acts as a processor on our behalf and may process the data in the United States: this is therefore a transfer outside the EU, based on the European Commission’s standard contractual clauses included in Anthropic’s data processing addendum. Under its commercial terms, Anthropic does not use the content it receives through the API or the answers it generates to train its models, and it automatically deletes them from its systems within 30 days, unless it has to keep them longer to enforce its usage policy or to comply with the law. Legal basis: performance of the service you request.
Estimates, suggestions and planning checks (TypeSafe)
To estimate the risk of delay of tasks and their likely duration, to assess the health of the projects in your portfolio, to suggest a duration, assignee and predecessor while you type the name of a new task and to check the AI assistant’s proposals before you apply them, Planitude uses Jev, a model by TypeSafe AI, Inc. (San Francisco, United States). For estimates, project health and checks we send only information derived from your plans: numbers and short sentences generated by us about durations, progress, slack, deadlines, dependencies, workload and variances; in these cases we do not send the names of projects, tasks or people, email addresses, notes, comments or identifiers, and where tasks and people need to be told apart we use anonymous labels such as “T1”. For suggestions on new tasks we instead send the name of the task you are typing and the names of other tasks in the same project, with their duration and the name of the phase that contains them: they are used to recognise similar tasks and the likely predecessor. People remain anonymous labels, described only by the tasks they work on; we do not send the project name, the names or email addresses of people, notes, comments or identifiers. When you use the AI assistant, to check that the proposal matches what you asked for we also send the text of your request, after replacing the names of the people, the project and the tasks that appear in the plan and removing email addresses, links and phone numbers, up to a maximum of 500 characters. TypeSafe processes this data as a processor on our behalf; according to its terms, it does not use it to train its models, keeps it for as long as needed to provide the service and may use it to prevent abuse and to derive technical usage data. The service is hosted in the United States: the transfer outside the EU is based on the European Commission’s standard contractual clauses included in TypeSafe’s data processing agreement. Legal basis: performance of the service you request (Art. 6(1)(b) GDPR).
Event log and page visits
We record the main actions linked to your account (sign-up, logins, project creation, imports, invitations, use of the AI assistant) and service errors, based on our legitimate interest in running and protecting the service. This log does not store your IP address, only a code derived from it in a non-reversible way and used against abuse, and of your browser only its type and operating system (e.g. “Chrome / macOS”). Our own page-visit counter works in aggregate, without cookies or identifiers: for each day only the page, language and referring domain. Events and counts are deleted automatically after 13 months; when you delete a project, its name is also removed from the log. We also keep a list of the service emails we send you (type, partly masked address, outcome and the sending provider’s identifier, never the content), deleted after 6 months, and a log of service errors that contains no personal data.
Founder emails and feedback
After you sign up you receive a single welcome email from Planitude’s founder: it is a service message tied to your account, and if you reply, your reply goes to him. After a few days of use we may ask you, in the app or by email, how likely you are to recommend Planitude to a colleague. Rating and comment are optional: we keep them with your account to improve the service, based on our legitimate interest, and delete them when you delete your account. Every feedback email contains a link to stop receiving them. If you leave a comment, the text also reaches the administrator through the service notifications on Telegram; Google Analytics, with your consent, receives only the score range, never the text.
Product news emails
If you have an account, we send you an email about the main new features of Planitude, at most a few times a year, in your account language. Legal basis: our legitimate interest in keeping you informed about the service you use (Art. 6(1)(f) GDPR). We use your email address and language and, so that the same email is never sent twice, we keep the date and outcome of each delivery for as long as you have the account. The emails are sent through Resend (Plus Five Five, Inc., United States). Every email contains a link to stop receiving them, without signing in: your choice also applies to feedback requests.
Usage analytics (Google Analytics 4)
To understand how the site is used we use Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It collects the pages visited, referral source, language, device and browser type, and some actions such as signing up, signing in, creating or importing a project, and using the AI assistant together with the number of tokens consumed. We do not send Google any email address, name, project content or your account identifier: app page addresses arrive in generic form (e.g. /app/projects/:id), and pages with private links or tokens (public links, invitations, email verification, password reset, unsubscribe, OAuth authorization) are not measured. Google Analytics 4 does not log or store IP addresses. The _ga and _ga_* cookies are set only if you accept them in the consent banner; without consent Google only receives cookieless signals with no identifiers, used in aggregate. Some events are sent to Google directly from our server (Measurement Protocol): AI assistant usage, with the feature, model and number of input and output tokens, email verification, accepted invitations and apps connected via OAuth, identified only by type (e.g. ChatGPT, Claude, Gemini). They are sent only if you have consented to analytics, are linked solely to the pseudonymous identifier in the _ga cookie, and contain no email address, name, message text or project content. Data is kept in Google Analytics for 14 months. Google may also process it in the United States: the transfer relies on the EU-US adequacy decision (Data Privacy Framework), to which Google is certified, and on the standard contractual clauses. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time from the Cookie policy page, as easily as you gave it.
Providers and recipients
We rely on: IONOS SE (Germany) for the servers; Contabo GmbH (Germany) for the encrypted backups, stored in the European Union; Resend (Plus Five Five, Inc., United States) for service emails such as address verification and password reset; Google for Sign in with Google, for advertising and for Google Analytics statistics, according to your consent choices; Anthropic for the AI assistant and TypeSafe for risk estimates, suggestions and planning checks, as described above. For some events the administrator also receives service notifications on Telegram (Telegram Messenger Inc., outside the EU): new sign-ups, projects created, invitations, public links, imports, plans generated by the assistant, deleted accounts and malfunctions, with the email of the user concerned and, where relevant, the project name. Legal basis: our legitimate interest in running and protecting the service. Transfers outside the EU take place with the safeguards provided for in Articles 44 et seq. of the GDPR. If you turn on calendar sync, the tasks it contains are read by the calendar app you choose (e.g. Google, Microsoft or Apple) and by anyone who has your personal link: you can regenerate or turn it off at any time from your profile. If you connect an external app with OAuth (e.g. ChatGPT, Claude or Gemini), that app accesses your projects with the permissions you grant it until you disconnect it from your profile, and the data it receives is processed by its provider under its own privacy policy. Cloudflare, Inc. (United States) delivers and protects the site’s traffic, as described in the dedicated section; Google Ireland Limited provides Google Analytics, only with your consent. If you set up a webhook, or connect an automation service such as Zapier, Make or n8n, the data of the events you select (project and task details, names of the people involved, comments) is sent to the address or service you choose, which processes it under its own terms; you can pause or delete webhooks at any time from your profile.
Site delivery and security (Cloudflare)
Since 30 September 2026, traffic to planitude.app passes through Cloudflare, Inc. (United States), which delivers the content (CDN) and protects the service against DDoS attacks, malicious traffic and repeated sign-in attempts (firewall and rate limiting). To do so it processes the IP address, the browser user agent and technical request data, such as the address of the requested page, the time and the HTTP headers. Legal basis: our legitimate interest in the security and availability of the service (Article 6(1)(f) GDPR). Cloudflare may also process this data outside the EU: the transfer relies on the EU-US adequacy decision (Data Privacy Framework), to which Cloudflare is certified, and on the standard contractual clauses. Cloudflare may set technical cookies that are strictly necessary for security, described in the cookie policy.
Jira integration (Atlassian)
If you connect a project to Jira Cloud, Planitude sends the data needed for synchronization to the Jira site you choose, operated by Atlassian (Atlassian Pty Ltd and its affiliates): activity names, notes, start and due dates, progress as an issue status, assignee (as the Jira account matched by email or chosen by you) and finish-to-start dependencies; from Jira it reads the same fields of the project's issues. Atlassian is a destination you choose, not one of our providers: on that side your data is governed by your contract with Atlassian and its privacy policy, and it may be processed outside the EU according to the safeguards Atlassian provides. To connect we use Atlassian OAuth 2.0: we store the access and refresh tokens encrypted (AES-256-GCM), never your Atlassian password, plus the Jira account ID of the person who connected the project and, for each mapped person, the account ID and the display name returned by Jira. As required by Atlassian’s user privacy rules, we periodically (by default every seven days) report these account IDs to its Personal Data Reporting API, sending only the ID and the date we last read the profile: if Atlassian tells us that an account has been closed, we delete that person’s name and mapping; if the profile has been updated, we read the name again, or delete it if it can no longer be read. Disconnecting the integration deletes tokens, mappings and synchronization state immediately, and in any case within 30 days after the connection stops working (for example because access was revoked in Atlassian) or is removed; issues already created in Jira stay there. Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR).
Azure DevOps integration (Microsoft)
If you connect a project to Azure DevOps Services, Planitude sends to the Azure DevOps organization you choose, operated by Microsoft (Microsoft Corporation and its affiliates), the data needed for sync: task names, notes, start and finish dates, progress as work item state, assigned person (as the Azure DevOps user matched by email or chosen by you), finish-to-start dependencies and a link to the task in Planitude; from Azure DevOps it reads the same fields of the project’s work items. Microsoft is a destination you choose, not one of our providers: there your data is governed by your agreement with Microsoft and its privacy statement and may be processed outside the EU under the safeguards Microsoft provides. To connect we use Microsoft Entra ID (OAuth 2.0) or a Personal Access Token you enter: we store the tokens encrypted (AES-256-GCM), never your Microsoft password, plus the Azure DevOps user names of matched people. Disconnecting the integration deletes credentials, matches and sync state immediately; work items already created stay in Azure DevOps. Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR).
Slack and Microsoft Teams notifications
If you connect a project to a Slack channel or a Microsoft Teams channel, Planitude posts project updates there: task names and keys, dates, progress, project status and the names of assigned people, with links to Planitude. It sends nothing else and does not read the channel's messages. Slack (Slack Technologies, LLC, a Salesforce company) and Microsoft (Microsoft Corporation, through Power Automate Workflows and Teams) are destinations you choose, not our providers: there your data is governed by your contract with them and their privacy policies, and it may be processed outside the EU according to the safeguards they provide. For Slack we use OAuth 2.0: we store the app access token encrypted (AES-256-GCM), the workspace and channel identifiers, and the language and time zone of the person who installed the app; for Teams we store the workflow URL encrypted. The Teams tab shows the Gantt chart only to people who sign in to Planitude and have access to the project. Disconnecting deletes the token (revoking it in Slack when no other project uses it) or the workflow URL immediately; messages already posted stay in the channel. Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR).
Telegram bot
If you link your account to the Planitude Telegram bot from your Profile, we store the Telegram chat identifier encrypted (AES-256-GCM) together with a fingerprint used to recognise it, your Telegram username encrypted, your time zone, the selected project and the recent conversation with the bot. The bot answers only in the linked chat, about the projects you can see in Planitude and with your same role, and does not change anything. The questions you write are processed by the AI assistant as described in the “AI assistant” section; the text of messages is never written to logs. Telegram (Telegram Messenger Inc. and its affiliates) is a destination you choose, not one of our providers: chat messages, including the bot’s answers, pass through and stay on its servers under its terms and privacy policy and may be processed outside the EU. When you unlink from your Profile or send /stop to the bot, the link and the conversation are deleted immediately; the messages stay in the Telegram chat until you delete them. Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR).
Microsoft PowerPoint add-in
If you use the “Planitude Gantt” add-in for PowerPoint, you sign in with your Planitude account through OAuth 2.1 with read-only permission: the add-in reads your workspaces, your project list and the tasks of the project you choose (names, dates, progress, phases, milestones, critical path, colours) and draws the Gantt as shapes in the open presentation. The presentation stays in PowerPoint: Planitude does not receive or read it; on the slide the add-in stores only the project identifier and the options you chose, so that the Gantt can be refreshed. The access token is kept in memory only; the refresh token (valid for 60 days and replaced on every use) is stored encrypted in the add-in’s storage on your device and is revoked when you sign out. You can also revoke access from your profile, in the “Connected apps” section. The add-in sets no cookies of its own: it sends Google Analytics an anonymous insert or refresh event (level of detail, time scale, row range; never names, content or identifiers) only if you have already accepted statistics in the add-in’s browser. Office.js, the library the add-in uses to talk to PowerPoint, is provided by Microsoft, which processes Office usage data under its own privacy statement. Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR) and, for statistics, your consent (Art. 6(1)(a) GDPR).
Advertising
Advertising cookies are set only after you accept them in the consent banner. If you refuse you keep the whole product; the ad space simply stays empty.
We do not sell your data
We do not sell or rent personal data, and the content of your projects is never sent to an advertising network.
Your rights
You can delete a workspace in one click or ask us to delete the account. Under the GDPR you can also request access, correction, restriction and portability, object to processing based on legitimate interest, and lodge a complaint with a data protection supervisory authority.
How long we keep things
Project data stays until you delete it. Server logs are kept for at most 12 months; the event log and page-visit counts are deleted automatically after 13 months. The IP address and browser of a login session are deleted when you sign out or, at the latest, within one day of the session expiring (after 30 days without use); the IP address of calls made with API keys is deleted after 90 days. Deleted accounts disappear from the backups within 30 days.
Contact
Questions about this page: info@planitude.app