Privacy Policy

Account Information: when you register, we collect your name, email address, phone number, and authentication credentials (password or Google OAuth ID). Organization Data: company name, teams, team members, their roles and permissions. Project Data: projects, milestones, tasks, sprints, comments, time entries, releases, repositories, environments and docs. Client Data: contact details of your customers, contracts, acceptance acts, tickets and chat messages. Financial Data: invoices, payment statuses, coin balance and transaction history. Card details are entered on the payment provider's side (e.g. Stripe, Monobank, Mollie) and are not stored by do1ob. Secrets: server access, API keys and other credentials you store in a project. They are stored encrypted. Files: documents, images and attachments you upload. Marketplace Data: service and product listings, orders, escrow operations in coins, reviews and messages. Technical Data: IP address, browser type, device information, usage patterns, PWA installation status. AI Interaction Data: prompts submitted to the AI assistant and the project context needed to answer them.

We use your data to: - Provide core platform services: project, task and sprint management, time tracking, the client workspace, acceptance acts, invoices and support tickets. - Store project secrets and docs and grant access to them only to authorized members. - Initiate client payments through the payment provider connected by your company and record their statuses. - Bill paid projects and manage your organization's coin balance and marketplace escrow operations. - Deliver AI assistant answers based on your project data. - Send notifications about tasks, tickets, acts, invoices, and payments. - Improve our platform through analytics and usage pattern analysis. - Ensure platform security, prevent fraud, and enforce our Terms of Service.

Your data is stored on secure servers with PostgreSQL databases, encrypted at rest and in transit using industry-standard protocols (TLS/SSL). Media files are stored in cloud storage (Cloudinary) with access controls. We implement: encrypted password storage (bcrypt + salt), JWT-based session management, rate limiting, and organization-level data isolation. While we employ strong security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

We share your data only as necessary to provide our services: - Payment providers (Stripe, Monobank / MonoPay, Mollie and others): process client payments to your company's own account, as well as coin balance top-ups. - Git hosts (GitHub, GitLab, Bitbucket): synchronize repositories, commits and merge requests when you connect them. - Messengers (Slack, Telegram, Discord): deliver notifications when you connect them. - Trackers (Jira, Linear, Trello): import and synchronize tasks when you connect them. - Google OAuth: used for social login authentication. - AI providers (e.g. OpenAI, Anthropic): process queries to the AI assistant. - Cloud storage (Cloudinary): hosts uploaded files and images. - Email and SMS services: used to send notifications, invitations and one-time sign-in codes. We do NOT sell your personal data to third parties. Data sharing within the platform (e.g., what a client sees in their workspace, marketplace listings) is controlled by you.

Depending on your jurisdiction, you may have the following rights: - Access: request a copy of the personal data we hold about you. - Rectification: correct inaccurate or incomplete data. - Erasure: request deletion of your data ("right to be forgotten"). - Portability: export your data in a machine-readable format (available in Settings > Portability). - Objection: object to certain processing activities. - Withdraw Consent: disable AI features or revoke third-party integrations at any time. To exercise these rights, contact us at the email provided in Section 10.

We retain your personal data for as long as your account is active or as needed to provide you with services. If you delete your account, we will delete or anonymize your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records for tax compliance).

do1ob is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

Your data may be processed in countries where our servers or third-party providers operate. We ensure appropriate safeguards are in place for any international data transfers in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a prominent notice on our platform. Your continued use of do1ob after such modifications constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: Email: do1ob.info@gmail.com Phone: Sole Proprietor (FOP) STOLBOVYI YEVHEN HENNADIIOVYCH Registered Address: 1, vul. Liutneva Kyiv, 02088, UKRAINE