Privacy Policy

Last updated: August 7, 2026

ProdoTracker ("we," "us," or "our") provides an AI assisted task and scheduling application currently offered as a pre-seed, beta stage product to a limited group of users. This Privacy Policy explains, in plain language, what personal information we collect, how we use and protect it, who we share it with, and the choices and rights available to you. It applies to the ProdoTracker website and application (the "Service").

ProdoTracker is a Canadian company, so Canadian privacy law, the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Law 25, is our primary framework for handling your personal information, described in Section 7 below. Because privacy obligations generally follow where a user is located rather than only where a company is based, this policy also describes additional rights that apply if you are located in the European Economic Area, the United Kingdom, Switzerland, or California.

By creating an account or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Account information

When you create a ProdoTracker account, we collect:

  • Your name
  • A username
  • Your email address
  • A password, stored only in hashed, non reversible form. We never store or can view your plaintext password

Task and content data

We collect and store the content you enter into ProdoTracker, including task titles, descriptions, scheduling details, and any metrics or metadata generated by the app's scheduling features (for example, importance, urgency, ease, and consequence scores).

Session and authentication data

We use a first party session cookie to keep you signed in. This cookie is set by ProdoTracker directly, expires after 7 days, and is used solely to authenticate your requests. We do not currently use third party analytics, advertising, or tracking cookies.

Technical and log data

Like most web services, our servers may automatically record standard technical information with each request, such as IP address, browser type, device information, and timestamps. This information is used only for security, troubleshooting, and keeping the Service running reliably, not for advertising or profiling.

Waitlist and contact information

If you join our waitlist or otherwise sign up to be contacted, we collect the email address you provide so we can send you the updates you asked for. See Section 10 below for how this is handled under Canada's Anti-Spam Legislation.

2. How We Use Your Information

  • To create and secure your account and authenticate your sessions
  • To store, display, and schedule the tasks you create
  • To generate the automated prioritization and scheduling suggestions described in our Terms of Service
  • To operate, maintain, secure, and improve the Service during its beta phase
  • To send you the updates you requested if you join our waitlist
  • To communicate with you about your account or material changes to our policies
  • To comply with legal obligations and enforce our Terms of Service

3. Cookies and Other Tracking Technologies

ProdoTracker currently uses a single, strictly necessary session cookie set directly by us (a first party cookie). It authenticates your logged in session, expires automatically after 7 days, and is not used for advertising, cross site tracking, or analytics profiles. Because this cookie is essential to signing in and using the Service, it does not require separate consent under Quebec's Law 25 or similar rules, though we disclose it here for transparency.

We do not currently use third party analytics, advertising, or social media tracking cookies. If that changes, this section will be updated to describe the categories of cookies used, their purpose, and, where required by law, we will request your express consent before setting any non essential cookie or tracking technology.

4. How We Share Your Information

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing purposes. As of the date above, ProdoTracker does not integrate any third party analytics or advertising tools.

We may share limited information in the following narrow circumstances:

  • Service providers: infrastructure and hosting providers (such as our cloud database provider) that process data on our behalf, under contract, solely to operate the Service
  • Legal requirements: if required to comply with a valid legal process, protect our rights, or prevent fraud or harm
  • Business transfers: if ProdoTracker is involved in a merger, acquisition, or asset sale, in which case we will provide notice before your information becomes subject to a different privacy policy
  • With your consent: in any other case where you direct us to share your information

If this changes in the future (for example, if we add third party integrations or analytics), we will update this policy and, where required, seek your consent before doing so.

5. Data Retention

We retain your account and task information for as long as your account remains active, so that the Service can function. If you delete your account or request deletion, we will delete or anonymize your personal information, typically within 30 days, except where we are permitted or required to retain certain information for legal, security, fraud prevention, or backup purposes for a limited additional period.

6. Data Security

We take reasonable administrative, technical, and physical measures to protect your information, including hashing passwords before storage and encrypting data in transit. However, no method of storage or transmission is completely secure, and as a beta product, ProdoTracker cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify affected users and applicable authorities as required by law, including, where applicable, the Office of the Privacy Commissioner of Canada and, for Quebec residents, the Commission d'accès à l'information.

7. Your Privacy Rights (Canada, PIPEDA and Quebec's Law 25)

As a Canadian company, our handling of your personal information follows the 10 fair information principles set out in PIPEDA: accountability, identifying purposes, consent, limiting collection, limiting use and disclosure and retention, accuracy, safeguards, openness, individual access, and the ability to challenge our compliance. In practice, that means:

  • Accountability: ProdoTracker is responsible for the personal information under its control. Questions or complaints can be directed to the contact in Section 15 below
  • Consent: we collect and use most of your information based on your consent, given when you create an account or join our waitlist, which you may withdraw at any time, subject to legal or contractual limits
  • Individual access: you may request access to the personal information we hold about you and information about how it has been used and disclosed
  • Correction: you may request that we correct inaccurate or incomplete information
  • Challenging compliance: if you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada, or, if you are a Quebec resident, the Commission d'accès à l'information du Québec

If you are located in Quebec, Law 25 additionally gives you the right to request that computerized personal information we hold about you be communicated to you, or to a third party you designate, in a structured and commonly used technology format, and the right to be informed of, and to obtain an explanation of, any decision based exclusively on automated processing of your personal information that has a significant effect on you. As explained in our Terms of Service, ProdoTracker's automated task rankings are decision support only, not a decision made about your rights or eligibility, and you can always review, override, or manually adjust them. Consistent with Law 25, we do not knowingly collect personal information from a person under 14 years old without the consent of a parent or legal guardian.

To exercise any of the rights above, contact us using the details in Section 15 below. You can learn more at the Office of the Privacy Commissioner of Canada.

8. Additional Rights for the EEA, UK, and Switzerland (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) also applies to our processing of your personal information, in addition to the Canadian framework described in Section 7. We process your information under the following legal bases: contractual necessity, to create your account and provide the core features of the Service; legitimate interests, to secure the Service, prevent abuse, and improve reliability; consent, for optional communications or features; and legal obligation, where we are required to process or retain information to comply with the law.

Under the GDPR, you additionally have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request erasure of your personal information ("right to be forgotten")
  • Restrict or object to certain processing of your information
  • Receive a copy of your information in a portable, machine readable format
  • Withdraw consent at any time, where processing is based on consent
  • Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects concerning you, without the opportunity for human review
  • Lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us using the details in Section 15 below. We will respond within one month, as required by the GDPR, and may need to verify your identity before completing your request.

9. Additional Rights for California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), also gives you the following rights, in addition to those described in Section 7:

  • Right to know: what categories of personal information we collect, use, and disclose, and the specific pieces of information we hold about you
  • Right to delete: request deletion of your personal information, subject to certain legal exceptions
  • Right to correct: request correction of inaccurate personal information
  • Right to opt out of sale or sharing: we do not sell personal information and do not share it for cross context behavioral advertising, so no opt out is currently necessary. We honor recognized opt out preference signals, such as Global Privacy Control, as a matter of practice
  • Right to limit use of sensitive personal information: we do not collect the categories of sensitive personal information defined under the CCPA (such as government identifiers, precise geolocation, or health data) beyond what is necessary to operate a basic account
  • Right to non discrimination: we will not deny you service, charge different prices, or provide a different level of quality because you exercised any of these rights

To exercise any of these rights, contact us using the details in Section 15 below. You may also designate an authorized agent to make a request on your behalf, subject to verification.

10. Email Communications and Canada's Anti-Spam Legislation (CASL)

If you join our waitlist or otherwise opt in to hear from us, we may send you commercial electronic messages, such as product updates or launch announcements. Because ProdoTracker is a Canadian company, these messages comply with Canada's Anti-Spam Legislation (CASL):

  • We only send commercial electronic messages to people who have given express consent, such as by submitting their email through our waitlist or signup form
  • Every commercial electronic message identifies ProdoTracker as the sender and provides a way to contact us
  • Every commercial electronic message includes a working unsubscribe mechanism. Unsubscribe requests are honored within 10 business days, and the mechanism remains available for at least 60 days after the message is sent
  • You may withdraw consent at any time using the unsubscribe link in any message, or by contacting us at the address in Section 15

11. Children's Privacy

ProdoTracker is not directed to children, and we do not knowingly collect personal information from children under 13 (or, for Quebec residents, under 14, without the consent of a parent or legal guardian, as described in Section 7). If you believe a child has provided us with personal information without appropriate consent, please contact us using the details in Section 15 below and we will take steps to delete that information.

12. Voice and Microphone Data

ProdoTracker's demo voice feature currently runs entirely in your browser using the browser's native Web Speech API, with scoring handled locally on your device. As of the date above, this feature is provided for demonstration purposes and does not transmit audio to our servers.

If and when voice or microphone processing moves to production with real server side audio handling, we will update this Privacy Policy before that change goes live, to disclose what audio or voice data is collected, how it is processed and stored, how long it is retained, and any third parties, such as speech to text providers, involved.

13. Cross Border Data Transfers

ProdoTracker is based in Canada. Depending on our infrastructure and service providers, your information may be processed in Canada, the United States, or other countries where those providers operate. If you access the Service from outside of the country where our servers are located, your information may be transferred across borders. Where required by applicable law, including PIPEDA and Quebec's Law 25, we take steps to require that service providers protect your information to a standard comparable to the protection it would receive in Canada.

14. Changes to This Policy

We may update this Privacy Policy as ProdoTracker and its practices evolve. We will update the "Last updated" date above and, for material changes, provide additional notice such as an in app notification or email before the change takes effect.

15. Contact Us

contact@prodotracker.com

For any privacy related questions or requests, including the rights described above, please reach out using the address above.

See also our Terms of Service, which includes our AI disclosure.