Privacy Policy

• Account details — your name, email address and a one-way hash of your password (never the password itself), your notification preferences, and the organisations and roles you hold.
• Workspace content — projects, tasks, comments, files, documentation and its Git history, workflows and templates, plus SSH public keys and API keys you create.
• Sign-in and security logs — for each sign-up, sign-in and refused attempt (wrong password, failed captcha, rate limit): the time, your IP address, the country derived from it, your browser's user-agent, an automatic bot check, the email address entered and, once known, your user ID. We also keep the date, IP and country of your sign-up and most recent sign-in on your account, and when you last used the app.
• Billing records — for each purchase: the organisation, the buyer's email, plan, seats, amount, any coupon and the payment status, plus the confirmation payOS sends us (which includes the bank transaction reference). Each payment step (started, paid, cancelled, failed or mismatched) is also logged with your user ID and email, IP address, country and user-agent.
• Page views (visit log) — when you open a page of the site or app: the time, the page path (never its query string), the page title, the address of the page that linked you (without its query string), your IP address, the country derived from it, your browser's user-agent and an automatic bot check. Page views are not linked to your account. Admin, sign-in, sign-up and invitation pages are not logged. Countries are looked up offline in a bundled copy of the DB-IP Lite database; no IP address is sent to a third party for this.

We do not receive card numbers or bank log-in details: card payments are handled entirely by Paddle and bank transfers by payOS and your bank.

• to provide the Service — sign you in, show your organisations' work, send the emails you asked for;
• to keep it secure — stop automated sign-ups, bots and password guessing, and investigate abuse (sign-in and visit logs);
• to take payments, apply your plan, reconcile orders with bank and Paddle records, and handle refunds;
• to understand overall usage — which pages are used, how many people visit and how many signed up this week — so we can improve the product;
• to answer support requests and to comply with legal, accounting and tax obligations.

We do not sell personal data. We share it only with service providers that help us run Planner, for that purpose:

• Paddle — payments and subscription management (Merchant of Record) for USD purchases. Paddle processes your payment details under its own privacy policy; we receive the subscription status, seat count and customer reference.
• payOS — bank transfer and VietQR payments for VND passes. We send payOS the order amount, an order code, a short description and the buyer's email address so the payment can be matched to your organisation; payOS returns the payment status and the bank transaction reference. See payos.vn.
• Cloudflare — Turnstile, when enabled, to tell people from bots on the sign-in and sign-up forms.
• Hosting provider — runs the application servers and database (virtual private servers).
• Email delivery provider — delivers invitations, notifications and account emails.

The sign-in, payment and page-view logs are not shared with any third party, analytics or advertising service: they stay in our own database, and the country is looked up on our own server. IP geolocation by DB-IP.com, licensed under CC BY 4.0.

UQ Planner does not offer Google or other social sign-in. We may also disclose data where the law requires it.

We use only what the Service needs to work:

• your sign-in token, chosen organisation and theme, kept in your browser's local storage;
• a uqp_pay cookie (180 days) that remembers whether you chose to pay in VND or USD.

The page-view log sets no cookie and stores nothing in your browser.

When the Paddle checkout or Cloudflare Turnstile loads, those providers may set their own cookies to process the payment or the check. We do not use advertising or cross-site tracking cookies.

• Sign-in and security logs, payment event logs and page-view logs are deleted automatically 90 days after they are written.
• Account details and workspace content are kept while your account or organisation exists, and removed when it is deleted.
• Order records are kept as long as needed for accounting, tax and dispute purposes.

You can ask us to give you a copy of your personal data, correct it, delete it, or stop or restrict a particular use of it, and you can withdraw consent where we rely on it. This includes the sign-in, payment and page-view logs: ask for a copy or deletion of the entries linked to your account, email address or IP address. Email business@uniqtech.dev; we reply within 30 days. These rights come from applicable data-protection law, including Vietnam's Decree 13/2023/ND-CP on personal data protection. You may also complain to the authority responsible for data protection where you live.

Passwords are hashed, connections are encrypted in transit, and access to production systems is limited to the people who run them. Our providers may process data outside Vietnam; when they do, we rely on their contractual commitments to protect it.

Planner is a tool for work and is not intended for children under 16. We do not knowingly collect their data.

We may update this policy from time to time. Material changes are posted here with a new “Last updated” date, and account owners are told about significant changes.

Unique Technology Software Company Limited, Tax code (MST): 0317015799, Street No. 37, Binh Phu Ward, Ho Chi Minh City, Vietnam. Privacy questions or requests: business@uniqtech.dev. See also our Terms of Service and Contact page.