Privacy Policy

1. Who we are

Nodeflame operates Work, a project management, time tracking and client reporting tool used by the Nodeflame team and the clients it invites. Nodeflame is the controller of the personal data described in this policy.

2. Information we collect

We only collect what we need to run the service:

• Account details — your name, e-mail address, job title, profile picture, role, permissions and time zone.
• Workspace content — projects, tasks, comments, files, time entries, budgets and reports that you or your colleagues add.
• Task-request portal — the e-mail address you use to receive a one-time sign-in code, and the requests and files you submit.
• Technical data — session cookies, your online status and last-seen time, and the IP address and browser details recorded in server logs.

3. How we use your information

• To provide the service: sign you in, show you the projects you have access to and keep your work in sync across devices.
• To send the notifications and e-mails you would expect, such as mentions, assignments, due-date reminders and sign-in codes.
• To keep the service secure, investigate misuse and enforce our Terms of Service.
• To answer your questions and support requests.
• To understand how the service is used so we can fix problems and improve it.

4. Cookies and local storage

We only use cookies that are strictly necessary for the service to work: a session cookie that keeps you signed in, and a separate one for the task-request portal. We do not use advertising or third-party tracking cookies.

Some preferences, such as table layouts and panel states, are kept in your browser's local storage so the app looks the way you left it.

5. Sharing and service providers

We do not sell your personal data. Inside a workspace, your profile and the content you add are visible to the people your role and permissions allow, including clients you share projects with.

We rely on a small number of providers to host and run the service — application hosting, database hosting, file storage and e-mail delivery. They process data only on our instructions and under contracts that require them to protect it. We may also disclose data when the law requires us to.

6. Data retention

We keep your data for as long as your account is active or as long as we need it to provide the service. Projects, time logs and reports are shared business records, so content you contributed may remain in the workspace after your account is deactivated. Server logs are kept for a limited period for security purposes.

7. Security

Data is encrypted in transit, sessions use signed tokens, and access to every project is limited by roles and permissions. No system is perfectly secure, so please keep your password private and tell us straight away if you suspect your account has been compromised.

8. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy of it;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data or restrict how we use it;
• object to processing based on our legitimate interests;
• lodge a complaint with your local data protection authority.

Many profile details can be changed in My Profile Settings. For anything else, contact us at hello@nodeflame.com and we will respond within the time the law requires.

9. Changes to this policy

We may update this policy as the service changes. When we do, we will revise the date at the top of this page, and we will let you know in the app or by e-mail if the changes are significant.

10. Contact

Questions about this policy or your data can be sent to hello@nodeflame.com.