Privacy Policy

1. Introduction

Worklamp ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our project management platform.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our services:

• Account information (name, email address, password)
• Profile information (avatar, display name)
• Project data (tasks, bugs, features, comments, messages)
• Team information (team member invitations, roles)
• Payment information (processed by third-party payment processors)

2.2 Information Collected Automatically

When you use Worklamp, we automatically collect:

• Usage data (features used, actions taken, time spent)
• Device information (browser type, operating system, IP address)
• Log data (access times, pages viewed, errors encountered)

2.3 OAuth Information

When you authenticate using Google OAuth, we receive your email address, name, and profile picture from Google. We do not receive or store your Google password.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage your account
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Send you marketing communications (only if you've opted in and can opt out anytime)
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Data Storage and Security

Self-Hosted Infrastructure: Worklamp is designed to run on your own infrastructure. When you self-host Worklamp, your data remains on your servers and under your control.

Security Measures: We implement industry-standard security measures:

• Passwords are hashed using bcrypt with a cost factor of 12
• Sensitive data is encrypted at rest
• All communications use HTTPS/TLS encryption
• Regular security updates and patches
• Role-based access controls

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your team: Information you share within your workspace is visible to your team members based on their permissions
• Service providers: We may share data with third-party service providers who perform services on our behalf (e.g., payment processing, email delivery)
• Legal requirements: We may disclose information if required by law or in response to valid legal requests
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred

6. Email Communications

Opt-In Required: We only send marketing emails to users who have explicitly opted in to receive them. You can opt in during registration or via the newsletter subscription form.

Unsubscribe: You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by updating your preferences in your account settings.

Transactional Emails: We will still send you important transactional emails (e.g., password resets, account notifications) even if you opt out of marketing emails.

No Selling of Email Lists: We will never sell or share your email address with third parties for marketing purposes.

7. Your Rights and Choices

You have the right to:

• Access and review your personal information
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications
• Object to processing of your personal information

8. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

9. Children's Privacy

Worklamp is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us through the contact form on our About page.