Privacy Policy

Last updated: February 18, 2026

This Privacy Policy explains how Sprintify (“Sprintify”, “we”, “us”, or “our”) collects, uses, and shares information when you use our website and services at sprintify.org (the “Service”). This policy is intended to reflect general data protection principles (including transparency, data minimization, purpose limitation, security, and accountability) and to help you understand your privacy rights.

1. Who we are

Sprintify is a SaaS project management tool that supports Agile, Waterfall, and Hybrid workflows.

2. Information we collect

We collect information that you provide directly, information created through your use of the Service, and limited technical information necessary to operate and secure the Service.

2.1 Account and profile information

  • Name (display name you provide or that may be associated with your sign-in method)
  • Email address
  • Avatar (for example, provided via Google sign-in if you choose to authenticate with Google)

2.2 Project and workspace data

The Service is built to help you manage projects. As a result, we store the content you and your organization submit, including:

  • Project data such as projects, boards, sprints, tasks, tickets, descriptions, comments, attachments, labels, and related collaboration content (collectively, “Project Data”).

2.3 Technical and usage information

We collect limited technical data for security, reliability, and analytics purposes, which may include IP address, device and browser information, timestamps, and event/usage data. We use Vercel Analytics to understand performance and usage patterns.

3. How we use information

  • Provide the Service (create accounts, authenticate users, store and display Project Data, and enable collaboration).
  • Maintain and improve the Service (debugging, performance monitoring, product improvements).
  • Security and abuse prevention (fraud detection, enforcing policies, protecting users and Sprintify).
  • Communications (service updates, critical notices, support responses).
  • Compliance with legal obligations and enforcement of our Terms.

4. Cookies and similar technologies

Sprintify uses cookies and similar technologies for essential service operation and for analytics.

4.1 Essential cookies (authentication)

We use essential cookies required for authentication and session management, including cookies set by Supabase Auth. These cookies are necessary to provide the Service and cannot be disabled if you want to use authenticated features.

4.2 Analytics cookies

We use Vercel Analytics to measure performance and usage. Vercel Analytics may set cookies or use similar technologies depending on your configuration and region. We use analytics data to improve reliability, identify errors, and understand feature adoption.

4.3 Consent

By using sprintify.org, you agree that essential cookies will be used. Where required by applicable law, Sprintify will obtain consent for non-essential cookies (such as analytics cookies).

5. Where and how your data is processed

Sprintify uses service providers to host and operate the Service:

  • Supabase (PostgreSQL database and authentication).
  • Vercel (application hosting and delivery).

These providers act as processors (or sub-processors) for the purposes of providing the Service. We do not sell your personal information.

6. Data sharing

We share information only as necessary to operate the Service, comply with law, and protect Sprintify and our users. Examples include:

  • Service providers (Supabase, Vercel, Vercel Analytics) to host, secure, and analyze the Service.
  • Legal and safety where required by law or to protect rights, safety, and security.

7. Data retention

We retain personal information and Project Data for as long as your account is active or as needed to provide the Service. We may retain certain information for longer where required to comply with legal obligations, resolve disputes, enforce agreements, or for legitimate business purposes such as security.

8. Your rights and choices (GDPR/CCPA principles)

Depending on where you live, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. Sprintify supports these general principles and will respond to verified requests consistent with applicable law.

Data deletion requests: You can request deletion of your account and associated data by contacting support@sprintify.org.

9. Security

We implement reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

10. International transfers

Your information may be processed in countries other than your own, depending on where our service providers operate. Where required, we rely on appropriate safeguards for such transfers.

11. Changes to this Privacy Policy

We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date. If changes are material, we may provide additional notice.

12. Contact

Questions about this Privacy Policy can be sent to support@sprintify.org.