Privacy Policy

We collect information that you provide directly to us, including:

• Account Information: When you create an account, we collect your email address and password (stored securely using industry-standard hashing).
• Integration Credentials: API tokens and credentials for third-party services (Azure DevOps, Aha!, Slack) that you choose to connect. These are encrypted at rest using AES-256 encryption.
• Usage Data: Information about how you interact with our service, including features used and actions taken.
• Synced Data: Work items, features, and other data synced from your connected integrations to provide the service.

We use the information we collect to:

• Provide, maintain, and improve our services
• Authenticate your account and secure your data
• Sync data between your connected third-party services
• Generate your personalized dashboard and morning briefings
• Send you important service-related communications
• Respond to your requests and support inquiries

We do not sell your personal information. Your data is used solely to provide and improve our services to you.

PM Perfect integrates with third-party services to provide its core functionality:

• Azure DevOps: We access work items, projects, and related data to sync with your product management workflow.
• Aha!: We access features, ideas, and product roadmap data to enable two-way synchronization.
• Slack: We access messages in channels you authorize to enable feature creation from conversations.

You control which integrations to connect and can revoke access at any time through your account settings. We only access the minimum data necessary to provide our services.

We implement appropriate technical and organizational security measures to protect your data:

• All API tokens and integration credentials are encrypted at rest using AES-256 encryption
• Passwords are hashed using bcrypt with appropriate salt rounds
• All data in transit is encrypted using TLS 1.2 or higher
• Access to production systems is restricted and logged
• Regular security reviews and updates are performed

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account:

• Your account information will be deleted within 30 days
• Integration credentials are immediately and permanently deleted
• Synced data from third-party services is deleted within 30 days
• We may retain certain information as required by law or for legitimate business purposes

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Export: Request a portable copy of your data
• Objection: Object to certain processing of your data

To exercise any of these rights, please contact us using the information provided below.

We use cookies and similar technologies for the following purposes:

• Authentication: To keep you logged in and maintain your session securely
• Preferences: To remember your settings and preferences (such as dark mode)
• Security: To help protect against CSRF attacks and unauthorized access

We do not use tracking cookies or third-party analytics services. All cookies we use are essential for the operation of our service.

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top of this policy
• Sending you an email notification for material changes

We encourage you to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or our data practices, please contact us at: