Privacy Policy

UPL Vision ("we", "us") operates InceptionPM, a project-management application. This policy explains what personal data we process, why, and the rights you have under the UK GDPR and Data Protection Act 2018. We are the data controller for the account data described here. Questions or requests: rfinnerty@upl.vision.

What we collect

• Account data — your name, email address, password (stored only as a secure hash by our authentication provider), job title and profile photo if you add one.
• Content you create — organisations, workspaces, projects, tasks, comments, time entries, files you attach, and related activity.
• Technical data — session cookies required to keep you signed in, and standard server logs (IP address, timestamps) kept for security and troubleshooting.

Why we process it (lawful basis)

• To provide the service and your account — performance of a contract.
• To secure the service and prevent abuse — legitimate interests.
• To send the optional daily digest and notifications you can turn off at any time — legitimate interests / consent.

Sub-processors

We share data only with the providers needed to run InceptionPM:

• Supabase — database, authentication and file storage (hosted in the EU/UK region).
• Vercel — application hosting and delivery.
• Resend — sending transactional and digest email.
• Google — only if you choose "Continue with Google" to sign in.
• Anthropic — only if your organisation enables AI features; the relevant text you submit is processed to generate the result and is not used to train models.

Retention

We keep your account data for as long as your account is active. When you delete your account, your profile and personal data are removed; content shared into an organisation may be retained by that organisation. Backups are rotated on a rolling basis.

Your rights

You can access, correct, export or delete your personal data. In the app, go to Settings → Privacy & data to download a copy of your data or delete your account. You may also email us at rfinnerty@upl.vision. You have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Security

Data is encrypted in transit, access is controlled by row-level security so you only ever see data you're entitled to, and secrets are held server-side. No system is perfectly secure, but we take appropriate technical and organisational measures to protect your data.

Changes

We'll update this policy as the service evolves and revise the date above when we do.