Privacy policy
Last updated September 29, 2026
Short version: your projects are stored in our database in Germany, we do not sell anything about you, and the advertising that pays for the free plan only starts after you accept it.
Who we are
Planitude is a free online project management service. This page explains clearly and concisely what we collect and why.
What we collect
The account details you give us (email, name, a hash of your password), the projects you create or import, ordinary server logs (IP address, browser, timestamps) and, to protect access, the IP address and browser associated with your sessions and with calls made with API keys.
Why we collect it
To run your account, store and schedule your projects, keep the service secure, and — only with your consent — show advertising that pays for the free plan.
Where the data is
In our PostgreSQL database on IONOS servers in Germany, inside the European Union. Only the data needed for the services described below leaves the EU: the AI assistant when you use it, service emails and internal notifications.
AI assistant
When you use the planning assistant or the AI chat in your projects, the text you type and the project data needed for the answer (project name, tasks with dates, durations, progress and dependencies, names of members and assigned people and, when the request requires it, notes, comments and change history) are sent to MiniMax, the provider of the language model, to generate the answer. We do not send email addresses or passwords, and nothing is sent if you do not use these features. The service is provided by Nanonoble Pte. Ltd. (Singapore), which according to its privacy policy stores data in a data center in the United States: this is therefore a transfer outside the EU, which MiniMax states it protects with contractual agreements including, where appropriate, the European Commission’s standard contractual clauses. Under its terms of service, MiniMax may also use the content it receives and the answers it generates to develop and improve its services. Legal basis: performance of the service you request.
Event log and page visits
We record the main actions linked to your account (sign-up, logins, project creation, imports, invitations, use of the AI assistant) and service errors, based on our legitimate interest in running and protecting the service. This log does not store your IP address, only a code derived from it in a non-reversible way and used against abuse, and of your browser only its type and operating system (e.g. “Chrome / macOS”). Page visits are counted in aggregate, without cookies or identifiers: for each day only the page, language and referring domain. Events and counts are deleted automatically after 13 months; when you delete a project, its name is also removed from the log.
Providers and recipients
We rely on: IONOS SE (Germany) for the servers; Resend (Plus Five Five, Inc., United States) for service emails such as address verification and password reset; Google for Sign in with Google and for advertising, according to your consent choices; MiniMax for the AI assistant, as described above. For some events the administrator also receives service notifications on Telegram (Telegram Messenger Inc., outside the EU): new sign-ups, projects created, invitations, public links, imports, plans generated by the assistant, deleted accounts and malfunctions, with the email of the user concerned and, where relevant, the project name. Legal basis: our legitimate interest in running and protecting the service. Transfers outside the EU take place with the safeguards provided for in Articles 44 et seq. of the GDPR.
Advertising
Advertising cookies are set only after you accept them in the consent banner. If you refuse you keep the whole product; the ad space simply stays empty.
We do not sell your data
We do not sell or rent personal data, and the content of your projects is never sent to an advertising network.
Your rights
You can delete a workspace in one click or ask us to delete the account. Under the GDPR you can also request access, correction, restriction and portability, object to processing based on legitimate interest, and lodge a complaint with a data protection supervisory authority.
How long we keep things
Project data stays until you delete it. Server logs are kept for at most 12 months; the event log and page-visit counts are deleted automatically after 13 months. The IP address and browser of a login session are deleted when you sign out or, at the latest, within one day of the session expiring (after 30 days without use); the IP address of calls made with API keys is deleted after 90 days. Deleted accounts disappear from the backups within 30 days.
Contact
Questions about this page: info@planitude.app