1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address (for authentication and communications)
Name (optional, for personalization)
Authentication credentials (managed securely by our authentication provider)

1.2 Content Data

For retro organizers, we collect:

Retro session data (notes, columns, votes, action items)
Room codes and sharing links
Subscription and billing information (for paid users)

1.3 Participant Data

Participants who join without an account:

Only provide a display name (stored locally in their browser)
No personal data is collected or stored on our servers
No account or authentication required

1.4 Usage Data

We automatically collect:

Log data (IP address, browser type, device information)
Usage metrics (feature usage, session duration)
Analytics data to improve our service

2. How We Use Your Information

We use your information to:

Provide, maintain, and improve our services
Process transactions and send billing information
Send technical notices and support messages
Respond to comments, questions, and customer service requests
Monitor and analyze usage patterns and trends
Detect, prevent, and address technical issues and security threats
Comply with legal obligations

3. Data Sharing and Disclosure

3.1 Service Providers

We may share data with third-party service providers who perform services on our behalf, including:

Authentication services (Clerk)
Payment processing (Stripe)
Hosting and infrastructure (Vercel, Railway)
Analytics services (PostHog)

3.2 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests by public authorities.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

3.4 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Free users' retro history is limited to the 5 most recent retros. Paid users have access to unlimited retro history while their subscription is active.

Upon account deletion, your data will be deleted within 30 days, except as required by law.

6. Your Rights and Choices

You have the right to:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate data
Deletion: Request deletion of your personal data
Data Portability: Receive your data in a structured format
Objection: Object to processing of your personal data
Restriction: Request limitation of data processing

To exercise these rights, please contact us at [email protected]

7. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Website: https://www.miniretroapp.com