Legal

Privacy policy

Last updated 1 August 2026 · This policy covers this website and the waitlist. A separate policy covers the data held inside a Projects.chat account.

1. Who we are
2. What we collect
3. Why we collect it
4. AI processing
5. Who we share it with
6. Cookies and tracking
7. How long we keep it
8. Your rights
9. Security
10. Changes

1. Who we are

Projects.chat is a project management product. This policy covers this website and the waitlist — the information you give us before you have an account. A fuller policy covers the data you keep inside an account.

The data controller is [legal entity name], [registered address]. You can reach us about anything on this page at privacy@projects.chat.

2. What we collect

Right now, on this site, that's:

• What you type into the waitlist form — your email address, and optionally your name, company, role, team size, which plan interests you, what you'd use it for and any notes you add.
• What you type into the contact form — your name, email, company, topic and message.
• Where you arrived from — the landing page you first hit, the referring website, and any campaign tags (utm_source and friends) in the link you clicked.
• Standard server logs — IP address, browser type and the pages requested, kept for a short period for security and debugging.

We don't ask for anything we don't need, and every field except your email address is optional.

3. Why we collect it

• To email you when your waitlist invite is ready. That's the point of the list.
• To reply to you if you contacted us.
• To decide what to work on next — the answers about team size and use case genuinely drive our priorities.
• To understand which pages bring people in, so we spend our effort in the right place.

Our lawful basis is your consent when you submit a form, and our legitimate interest in running and improving the site. We do not sell your data, and we don't send marketing email beyond what you signed up for.

4. AI processing

This website does not send anything you type to an AI model. Nothing on the waitlist or contact form is processed by AI.

Inside the product, AI features send the relevant parts of a project to the model provider you have selected — Anthropic or OpenAI — solely to answer the request you made. Your content is not used to train models, ours or theirs, and we use zero-retention endpoints where providers offer them. The security page explains the mechanism in full.

5. Who we share it with

Only the vendors needed to run the service:

• [Hosting provider] — servers, database and backups
• [Email provider] — sending the emails you asked for
• [Payment processor] — only once there's something to pay for

We'll tell account owners by email before adding a new processor that touches customer data. We may also disclose data if we're legally required to, in which case we'll tell you unless we're legally prevented from doing so.

6. Cookies and analytics

This site sets one cookie: a session cookie that remembers which landing page you arrived on and whether you've already joined the waitlist. It isn't used for advertising and it isn't shared.

For visitor numbers we use two privacy-first analytics services, Simple Analytics and Tinylytics. Neither sets cookies, collects personal data, fingerprints your device, or follows you to other websites. What we see is aggregate: how many people looked at a page, and roughly where in the world and which site they came from. We can't pick you out of it, and neither can they.

There are no advertising pixels and no cross-site trackers on this site. If that ever changes, this section changes with it and we'll say so.

7. How long we keep it

• Waitlist entries — until you ask us to delete them, or twenty-four months after we stop using the list, whichever comes first.
• Contact messages — twenty-four months, so we have the thread if you write again.
• Server logs — thirty days.

8. Your rights

Wherever you are, you can ask us to show you what we hold, correct it, delete it, or send it to you in a portable format. If you're in the UK, EU or a similar jurisdiction, you also have the right to object to processing and to complain to your data protection authority.

Email privacy@projects.chat and we'll action it within thirty days — usually the same week. There's no form to fill in and we won't try to talk you out of it.

Our servers are located in [region]. Where data is transferred internationally, we rely on standard contractual clauses or an equivalent safeguard.

9. Security

Data is encrypted in transit and at rest, access is limited to the people who need it, and backups are encrypted and tested. The security page sets out how all of that works in detail.

10. Changes

If we change this policy in a way that matters, we'll email everyone on the waitlist rather than quietly updating the date at the top. The current version always lives at this address.

Questions? Contact us or email privacy@projects.chat.