Privacy Policy

Last updated 2026-04-14

1. Who we are

PIT (Project Issue Tracker) (“we”, “us”) provides a project management and CRM platform. This policy explains what data we collect when you use the platform and any integrations you choose to connect (Gmail, Microsoft Outlook, HubSpot, etc.).

2. Data we collect

Account data. Name, email address, hashed password, and the workspace / organization memberships you create or are invited to.

Content you enter. Projects, tasks, notes, attachments, CRM records (accounts, contacts, deals, activities), and any other information you type into the app.

OAuth-connected mailbox data (Gmail / Outlook). If you connect a mailbox, we store the provider-issued OAuth access and refresh tokens, your email address, and metadata for email messages you send from or sync into PIT (subject, body, recipients, timestamps, open/click/reply events). We request the minimum scopes necessary: gmail.send / Mail.Send to send outbound messages, gmail.readonly / Mail.Read to detect replies to your outbound sequences. We do not read mail that is unrelated to contacts already in your CRM workspace, and we never sell, share, or use your mailbox data for advertising or model training.

HubSpot integration data. If you connect a HubSpot portal, we store the OAuth access/refresh tokens and sync the CRM objects (deals, contacts, companies) that you have granted access to per the scopes you approve.

Operational data. IP address, browser/user-agent, request timestamps, and audit logs of actions taken in the platform.

3. How we use your data

  • Deliver the features you request (sending email, syncing CRM records, scheduling meetings, running automations).
  • Secure and monitor the service (rate limiting, abuse detection, audit logs).
  • Support and debug issues you report.
  • Provide usage analytics to account owners within their own workspace.

Google API Services User Data limits: Our use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data to train generalized AI/ML models.

4. Data sharing

We do not sell personal data. We share data only with subprocessors that help us run the platform:

  • Cloud hosting and database (Railway, managed Postgres).
  • Email delivery providers you explicitly connect (Google, Microsoft).
  • CRM providers you explicitly connect (HubSpot).
  • Error-monitoring and logging vendors, scoped to operational metadata.

We will disclose data if legally required (court order, subpoena) and will try to notify you first unless prohibited.

5. Data retention

Content you create lives for as long as your workspace is active. You can delete it at any time. Disconnecting a mailbox revokes our copy of the tokens and stops future syncs; previously imported messages remain until you delete them. Deleting your account removes all personal data and tokens within 30 days, excluding backups that roll off within 90 days.

6. Security

We use TLS in transit, encrypted-at-rest database storage, scoped OAuth tokens, and principle-of-least-privilege access controls internally. No system is perfectly secure; report suspected issues to privacy@projectissuetracker.com.

7. Your rights

Depending on your jurisdiction (GDPR, CCPA, etc.) you may have rights to access, correct, export, or delete your personal data. Email privacy@projectissuetracker.com and we'll respond within 30 days.

8. Revoking an integration

You can revoke access from PIT at any time via Settings → Mailboxes or Settings → HubSpot. You can also revoke from the provider directly:

9. Changes

Material changes will be announced in-app at least 14 days before they take effect. Continued use after that constitutes acceptance.

10. Contact

Questions? privacy@projectissuetracker.com