Privacy Policy

Beta version. Effective October 14, 2026. Last updated October 14, 2026.

This Privacy Policy explains how Jonsson Associates, LLC ("Pertify," "we," "us"), an Oregon limited liability company, collects, uses, and shares information in connection with the Pertify project-scheduling application at app.pertify.io (the "Service") and our public website at pertify.io (the "Site").

1. Who This Policy Covers, and an Important Note About Third Parties

This policy applies to:

Customers: the businesses or individuals that create Pertify accounts. Pertify is available to both, and no company affiliation is required.
End users: the individual members of a Customer's organization (Owners, Editors, Viewers).
Site visitors: anyone who visits pertify.io or signs up for the beta there.

Important: Pertify also processes information about named individuals who are not Pertify users, for example team members, contractors, or client-side personnel entered into a project as "resources" (with role, team, availability, working calendar, assignments and, internally, rate information). These individuals typically have not created an account and have not interacted with Pertify directly. The Customer that enters this information is responsible for having the appropriate rights and lawful basis to do so, and for providing any required notices to those individuals (see our Terms of Use, Section 6). If you are such an individual and have questions about your data, please contact the organization that entered your information. Section 9 explains how Pertify assists with such requests.

2. Controller and Processor Roles

For Customer Content (project data, including resource or personal data about non-users that a Customer inputs), the Customer is generally the controller, and Pertify acts as a processor, acting only on the Customer's instructions. A Data Processing Addendum is available on request at jonssonassociates@gmail.com.
For account, usage, beta signup and Site data that we collect to operate, secure, promote and improve the Service (see Section 3), Pertify acts as a controller.

3. Information We Collect

3.1 Account and Identity Data

Display name, email address, and avatar (if provided). Sign-in uses an emailed one-time code. We also keep session data.

3.2 Customer Content: Schedule Data

Projects, activities, three-point time estimates, dependencies (type and lag), constraints (type, date, note), milestones, and free-text descriptions (which may include personal data you choose to type).

3.3 Resource and People Data

Named resources with role, team, availability percentage, working calendars and exceptions, activity assignments and effort percentage, and RACI roles. This register is organization-wide: a person entered once is visible across that organization's projects. This category most often includes data about individuals who are not Pertify users (see Section 1).

3.4 Rate and Cost Data

Hourly, daily or period rates, unit costs, fixed costs, and per-activity and project budgets, reserves and earned-value figures. When tied to a named individual, rate data works like compensation information and is treated as confidential. It is always internal in Client View (Section 6).

3.5 Progress, Baselines and Earned-Value Data

Percent complete, actual start and finish dates, actual cost, baseline snapshots, and derived schedule performance metrics.

3.6 Audit and Change Log Data

A history of who made each change and when. This is personal data about an end user's own activity in the Service. Audit logs are retained for one (1) year.

3.7 Uploaded and Exported Files

CSV or XLSX files you import (which create a new project and may contain third-party personal data you supply) and the workbook, CSV and PNG exports you generate.

3.8 Beta Signup Data (pertify.io)

When you join the beta on our Site, we collect your email address, your answers to our signup questions (what describes you, what you'll plan first, and team size), whether you're studying for the PMP or CAPM, the first page you landed on, the website that referred you, and any campaign tags in the link you followed. We use this to run the beta, contact you about it, verify study-discount eligibility, and understand who Pertify is useful for.

3.9 Cookies and Site Analytics

The Service uses a cookie or token needed to keep you signed in. The Site uses privacy-focused, cookieless analytics that count page views and actions such as button clicks and form completions in aggregate. These analytics do not use cookies, do not track you across other websites, and do not build a profile of you.

4. How We Use Information

We use the information above to provide and operate the Service (including computing schedules, which happens in your browser); authenticate you and maintain sessions; enable organization and role-based collaboration; run the beta program; provide customer support; maintain security and detect abuse; and, in de-identified or aggregated form, understand usage and improve the Service and Site (see Section 11).

We do not use Customer Content to train AI or machine-learning models. If this changes, we will update this policy and describe any related data use and opt-in mechanism before doing so.

AI assistant connections. If you connect an AI assistant to Pertify, that assistant can read and change your plans only as you allow, under your own account and role. Cost and rate data is never made available through the AI connection. What the assistant's provider does with the information you share in your chats is governed by that provider's own terms and privacy policy.

5. Legal Bases for Processing (EEA and UK Users)

Where GDPR applies, we (or, for Customer Content, the Customer as controller) rely on these legal bases: performance of a contract (providing the Service you signed up for), legitimate interests (security, service improvement, running the beta), consent (marketing communications), and compliance with legal obligations.

Service providers (sub-processors): We use third-party providers to operate the Service and Site, including Supabase (database and authentication), Lovable (application hosting and build platform), an email delivery provider (sign-in codes and invitations), Stripe (payments, when paid plans launch), and a cookieless analytics provider for the Site. A current list is available on request.
Client View: Pertify's Client View lets a Customer mark certain fields as visible to specified parties within the product. It is an in-app setting and does not create an externally shareable link. Decisions about what to share, and with whom, are made by the Customer, not by Pertify.
Legal requirements: We may disclose information if required by law or legal process, or to protect the rights, property or safety of Pertify, our users or others.
Business transfers: In connection with a merger, acquisition or sale of assets, information may be transferred, subject to this policy.
We do not sell personal information, and have not sold personal information in the preceding 12 months, as "sale" is defined under CCPA/CPRA. We do not "share" personal information for cross-context behavioral advertising.

7. Data Retention and Deletion

We keep Customer Content for as long as the account or organization is active, plus the post-termination window below.
Account or organization deletion: Email jonssonassociates@gmail.com to delete your account or organization. We will confirm when deletion is complete, including the projects and resources that belong to it.
Post-termination export window: After termination, you may export your Customer Content for 30 days before it is deleted.
Backups: Data may remain in backups for up to one (1) year after deletion from production systems.
Audit logs: retained for one (1) year.
Beta signup data: kept while the beta runs and for as long as needed to honor study-discount commitments, then deleted or de-identified. You can ask us to delete it at any time.

8. Data Security

Tenant isolation between organizations relies on database row-level security (RLS) policies.
Data is encrypted in transit using TLS and at rest using our database provider's encryption.
Access to production systems is limited to the people who need it to run and support the Service.
Breach notification: If a security incident affects personal data, we will notify affected Customers without undue delay and as applicable law requires.

9. Your Rights and Requests

Account holders and Customer personnel: Depending on where you live, you may have the right to access, correct, delete or port your personal data, to restrict or object to processing, and (for California residents) to opt out of certain data uses. To exercise these rights, email jonssonassociates@gmail.com.

Individuals entered as "resources" who are not Pertify users: this data is entered and controlled by the Customer organization, so please direct requests to that organization. Pertify will help Customers respond, consistent with our role as processor.

EEA and UK (GDPR): rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to a supervisory authority.
California (CCPA/CPRA): rights to know, delete, correct, and opt out of sale or sharing (we do not sell or share personal information), and the right not to be discriminated against for using these rights.
Other US states: residents of other states with consumer privacy laws may have similar rights, and we will honor them as those laws require.

10. International Data Transfers

Pertify is operated from the United States, and our service providers may store and process data in the United States and other countries. If you use Pertify from outside the United States, your information will be transferred to and processed in those countries, with safeguards as required by applicable law.

11. Company Access to Customer Content

Pertify staff may access Customer Content only as necessary to provide support, investigate and fix technical issues, or maintain security. We do not use Customer Content to train AI or machine-learning models (see Section 4). We may use aggregated or de-identified usage data, which cannot reasonably identify any individual, to analyze and improve the Service.

12. Children's Privacy

The Service is intended for adults. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.

13. Cookies and Similar Technologies

The Service uses a cookie or similar technology needed to keep you signed in. The Site uses cookieless analytics, as described in Section 3.9. We do not use advertising or cross-site tracking cookies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will give notice of material changes (for example, by email or in-app notice) before they take effect.

15. Contact Us

Questions about this Privacy Policy or our data practices: jonssonassociates@gmail.com.