1. Introduction

Sprintro ("we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use and protect it, and what rights you have regarding your data when you use our Service at sprintro.app.

This policy applies to all users of the Service, including residents of California, Virginia, Colorado, Connecticut, Texas, and all other U.S. states.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name and email address provided at registration
• Profile Information: Display name, role, and optional avatar
• Team and Organizational Data: Team names, member roles, and schedules you enter
• Sprint and Planning Data: Sprint names, dates, capacity figures, and story point estimates
• Availability Data: Time-off entries, leave types, and date ranges you submit
• Communications: Messages sent through our contact form

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, and interaction patterns
• Technical Data: Browser type, operating system, and general device category
• Log Data: IP address, access timestamps, and error logs retained for security purposes
• Authentication Cookies: Session tokens required to keep you signed in

3. How We Use Your Information

• Service Delivery: To operate, maintain, and improve the Service
• Account Management: To create, authenticate, and manage your account
• Communications: To send transactional emails (password resets, invitations) and, with your consent, product updates
• Security: To detect and prevent fraud, abuse, and unauthorized access
• Analytics: To understand how the Service is used in aggregate so we can improve it
• Legal Compliance: To comply with applicable laws and enforce our Terms of Service

We do not use your data to train or build artificial intelligence or machine learning models for any purpose beyond operating the Service for you.

4. Data Storage and Security

4.1 Storage Location

Your data is stored on servers located in the United States. If you access the Service from outside the United States, your information is transferred to and processed in the United States, which may have different data protection laws than your jurisdiction. By using the Service, you consent to this transfer.

4.2 Security Measures

We implement industry-standard safeguards including:

• Encryption of all data in transit (TLS/HTTPS)
• Encryption of data at rest
• Access controls and least-privilege data isolation
• Rate limiting and abuse-prevention controls
• Regular security reviews and dependency updates

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to using commercially reasonable measures to protect your data.

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing or any other commercial purpose. This applies to all users, including California residents under the California Consumer Privacy Act (CCPA).

5.2 Service Providers

We engage trusted third-party service providers to help operate the Service (such as cloud hosting and email delivery). These providers are contractually prohibited from using your data for any purpose beyond performing services for us and are required to maintain appropriate security standards.

5.3 Team Collaboration

Certain information you enter — such as your display name, role, and availability — is visible to other members of your team within the Service. This visibility is inherent to the collaborative nature of the platform.

5.4 Legal and Safety Disclosures

We may disclose your information when required to:

• Comply with a valid legal obligation, court order, or governmental request
• Protect the rights, property, or safety of Sprintro, our users, or the public
• Investigate or prevent fraud, security incidents, or illegal activity

5.5 Business Transfers

If Sprintro is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice and you will have the ability to close your account before any transfer takes effect.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion:

• Most personal data is deleted within 30 days
• Backup copies may persist for up to 90 days before permanent deletion
• Certain records may be retained longer if required by law or for legitimate security purposes
• Aggregated, de-identified analytics data is retained indefinitely and cannot be used to identify you

7. Your Privacy Rights

7.1 All Users

Regardless of where you are located, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated personal data
• Portability: Receive your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from non-essential marketing communications at any time

7.2 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected from you
• The right to opt out of the sale or sharing of personal information (we do not sell or share your data)
• The right to correct inaccurate personal information
• The right to limit use and disclosure of sensitive personal information
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at info@sprintro.app. We will respond within 45 days as required by law.

7.3 Virginia, Colorado, Connecticut, Texas, and Other State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive privacy laws have rights similar to those described in Section 7.1, including the right to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of certain processing. To exercise these rights, contact us at info@sprintro.app.

We will not discriminate against you for exercising any of your privacy rights.

8. Cookies and Tracking Technologies

• Essential Cookies: Required for authentication and core Service functionality. These cannot be disabled without breaking the Service.
• Preference Cookies: Remember your settings such as theme and notification preferences.
• Analytics: We may use anonymized, aggregate analytics to understand Service usage. We do not use cross-site tracking or behavioral advertising.

You can control cookies through your browser settings. Blocking essential cookies will prevent you from logging in or using the Service.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, contact us immediately at info@sprintro.app and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. For material changes, we will notify you at least 14 days in advance via email or a prominent notice within the Service. Your continued use of the Service after the effective date of any update constitutes your acceptance. If you disagree with the updated policy, you must close your account.

11. Contact Us

To exercise your privacy rights, ask questions, or report a concern, contact us at:

• Email: info@sprintro.app
• Contact form: sprintro.app/#contact

We will respond to verifiable requests within 45 days. For complex requests we may extend this by an additional 45 days with notice.