Legal

Privacy Policy

Last updated: August 18, 2026

Note: this policy is written against GanttPM's current product and infrastructure and should still get a final pass from counsel before this page goes live.

IMPORTANT — READ THIS PRIVACY POLICY CAREFULLY BEFORE ACCESSING OR USING GANTTPM. BY ACCESSING OR USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS PRIVACY POLICY, THAT YOU UNDERSTAND IT, AND THAT YOU AGREE TO BE BOUND BY ITS TERMS. IF YOU DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY, PROMPTLY EXIT WITHOUT ACCESSING OR USING THE SERVICE.

1. Introduction

This Privacy Policy describes how iMagicsoft (ABN 29 094 363 729) ("we", "us", or "our") collects, uses, discloses, stores, and protects personal information in connection with the GanttPM web app, desktop and mobile apps, marketing website, and related services (together, the "Service"). We are committed to protecting your privacy and complying with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). GanttPM is offered on a Free — Local tier that runs entirely on your own device with no account required, and a Cloud subscription tier that adds sync, collaboration, and account-based features. What we collect depends heavily on which tier you use — see §3 below.

"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

2. Kinds of Personal Information We Collect and Hold

Depending on how you use the Service, we may collect and hold:

  • Account and contact details — email address and, for Cloud accounts, sign-in credentials, organization name, and role — collected when you sign in to Cloud sync, invite teammates, or contact support.
  • Payment information — billing name and payment method details, processed by our third-party payment processor (Stripe) for Cloud subscriptions. We do not store full card numbers ourselves.
  • Project content ("Customer Data") — project, task, dependency, resource, comment, and attachment data you create or upload while using a Cloud-synced project. On the Free — Local tier, this data stays in a database on your own device and is not sent to us.
  • Usage data — IP address, browser or app version, device type, session activity, and error logs, collected for security, reliability, and product improvement.
  • Newsletter sign-ups — the email address you provide if you subscribe to product updates from our website footer.

We do not collect personal information unless it is reasonably necessary for the functions described in this policy.

3. How We Collect Personal Information

We collect personal information directly from you when you:

  • Sign in to enable Cloud sync, subscribe to a Cloud plan, or invite teammates to an organization.
  • Create, edit, or import project data (including Microsoft Project files) into a Cloud-synced project.
  • Contact us for support, or subscribe to our newsletter.

We also collect information automatically through the Service (for example, session and error logs) and, for Cloud subscriptions, from our payment processor once a transaction completes.

4. Local-First Data (Free — Local Tier)

GanttPM's Free — Local tier is designed so your project data never has to leave your device. Tasks, dependencies, resources, baselines, and every other part of a local project are stored in a local database on your computer, phone, or tablet. We have no visibility into and do not collect that data unless and until you sign in to enable Cloud sync for that project — at which point the data you choose to sync is transmitted to and stored on our Cloud infrastructure, and this policy's Cloud-related sections apply to it.

5. How We Hold Personal Information

Cloud account and project data is hosted on Microsoft Azure infrastructure and secured with encryption in transit and at rest, access controls, and regular security patching. Our marketing website is served via Cloudflare. We use industry-standard measures to protect against unauthorised access, loss, misuse, or alteration of the data we hold, but no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. How We Use Personal Information

We use personal information for the following purposes:

  • To provide, host, maintain, and improve the Service, including authentication, cloud sync, and collaboration features.
  • To process Cloud subscriptions, payments, and billing.
  • To communicate with you — service updates, security notices, support responses, and (where you've opted in) newsletters or product announcements.
  • To monitor and analyse usage for performance, troubleshooting, and product improvement.
  • To maintain the audit and activity logs described in our product documentation, for Cloud organizations that use those features.
  • To detect and prevent fraud, abuse, and security incidents, and to comply with legal obligations.

7. Disclosure to Third Parties

We may disclose personal information to:

  • Infrastructure providers — Microsoft Azure (Cloud hosting) and Cloudflare (website hosting and network security).
  • Payment processors — Stripe, for Cloud subscription billing.
  • Identity providers — our authentication provider, for Cloud sign-in.
  • Email and messaging service providers — for newsletter delivery and transactional emails.
  • Analytics providers — Google Analytics, to understand website traffic and usage patterns.
  • Professional advisors — lawyers, accountants, and auditors, where necessary.
  • Government or regulatory authorities — where required by law or legal process.

We require these third parties to handle personal information securely and only for the purposes we've engaged them for. We do not sell or rent your personal information.

8. Overseas Recipients

Because our infrastructure and service providers operate internationally, personal information may be processed or stored in countries other than your own, including countries whose privacy laws may differ from those where you are located. Where we transfer personal information overseas, we take reasonable steps to ensure it continues to be handled consistently with this policy.

9. Cookies and Tracking Technologies

Our marketing website uses a small number of cookies — for example, ageo_country cookie used to show pricing in your local currency — and Google Analytics, to understand aggregate website traffic and usage patterns. We do not currently run third-party advertising trackers on the marketing site. The web app may use local storage and session tokens to keep you signed in and remember your preferences. You can configure your browser to block cookies, but doing so may affect some functionality.

10. Data Retention and Deletion

We retain Cloud account and project data for as long as your account or subscription is active, or as needed to provide the Service. If you cancel a Cloud subscription, your synced data remains accessible for a reasonable period to allow export before removal; you are responsible for exporting anything you want to keep. Local — Free tier data lives entirely on your device and is retained or deleted according to your own device, not by us. We may retain limited information as required for legal, tax, or security purposes after account closure.

11. Your Rights — Access and Correction

You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, or misleading. To make a request, contact us using the details in §14. We will respond within a reasonable timeframe and may need to verify your identity first.

12. Complaints

If you believe we have breached the APPs or mishandled your personal information, please contact us with details of your concern. We will investigate and respond in writing within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page and, for material changes, take reasonable steps to notify you. Continued use of the Service after a change constitutes acceptance of the updated policy.

14. Contact Us

Questions about this Privacy Policy or how we handle your personal information can be sent to hello@ganttpm.com.