Privacy policy

Team Progress Status ("the app") helps organizations track their team's work: tasks, time, status forms, reviews, scorecards and discussions. This policy explains what the app stores and why.

What we collect

• Account details: your name, email address and, if you use one, a password (stored only as a secure hash). Your organization's admins may add details such as an employee number, team, city, country, working hours and other fields they set up.
• Google sign-in: if you choose Continue with Google, we receive only your name, email address, whether the email is verified, your Google account ID and, for company accounts, your Google Workspace domain. We use them to sign you in to the account with the same email. We don't get your Google password, contacts, files or any other Google data, and we don't post anything to Google.
• Work you enter: tasks, time entries, status-form answers, task logs and reviews, project documents and links, discussion messages, and reports you send through Report an issue (including any screenshot you add).
• Technical data: a session cookie that keeps you signed in, a cookie with your timezone so times show correctly, and, when you report an issue, the page and browser it happened in.

How we use it

To run the app for your organization: signing you in, showing your work and your team's progress to the people allowed to see it, sending the emails the app sends (invites, password resets, form reminders, review updates, mentions), and fixing problems you report. We don't sell your data, show ads, or use it to build profiles for anyone else.

Who can see it

• Your organization: its admins and the people they give roles to see what their roles allow (for example employees, reports and task reviews). Your teammates see what's shared in projects, task reviews and discussions.
• The app's operators (super admins) can view organizations to support them and read reports sent through Report an issue.
• Service providers that host the app, store its database and deliver its emails, only to provide those services.

Keeping and deleting data

Data is kept while your organization uses the app. Your organization's admins can change or deactivate your account; to have your data removed, ask your organization's admin, or send a request through Report an issue.

Security

Connections are encrypted (HTTPS), passwords are hashed, sign-in sessions expire, and Google sign-in is verified with Google's signed tokens.

Changes

If this policy changes, the date above changes too.