Draft — pending legal review. This document is a working draft and is not yet a binding agreement. Final, counsel-approved terms will replace it before general availability.

Privacy Policy

Effective 14 June 2026

This Privacy Policy explains how HDPulseAI (“we”) collects, uses, and protects personal data in connection with Sage Project Management(the “Service”). When you use the Service as part of an organization, that organization is the controller of its workspace data and we act as its processor.

1. Data we collect

Account data — name, work email, hashed password, and organization membership.
Workspace content — projects, work items, comments, documents, and other content your team creates.
Usage & diagnostics — logs, metrics, and error reports used to operate and secure the Service.
Billing data — subscription tier and seat counts; payment details are handled by our payment processor, not stored by us.

2. How we use data

We use personal data to provide, secure, and improve the Service; authenticate users; send transactional email (such as verification and password-reset messages); process billing; and meet legal obligations. We do not sell personal data.

3. AI features

AI-assisted features process the workspace content you direct them to, through our AI gateway backed by AWS Bedrock. Prompts are not stored in clear text in our AI activity logs — we record metadata and a one-way hash of the prompt, never its raw content. AI features never write to a system of record without explicit human approval, and we exclude secrets from prompts.

4. Sharing & subprocessors

We share data only with service providers that process it on our behalf under contract (for example email delivery, payments, cloud hosting, and AI inference). These are listed on our Subprocessors page. We may disclose data where required by law.

5. Security

We protect data with encryption in transit and at rest, role-based access control, multi-tenant isolation, audited access, rate limiting, and encrypted, restore-tested backups. No system is perfectly secure, but we work to minimize risk and respond to incidents promptly.

6. Retention

We retain workspace content for the life of your subscription and for a limited export window afterward. Ephemeral records (such as expired verification tokens and old delivery logs) are purged on a schedule. Audit records are retained longer to meet security and compliance needs.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. Workspace members should contact their organization administrator; you can also reach us directly.

8. International transfers

We may process data in regions where we or our subprocessors operate, with appropriate safeguards for cross-border transfers.

9. Changes

We may update this Policy; material changes will be notified in advance and the effective date updated above.

10. Contact

Privacy questions or requests? sagewm-pm@hdpulseai.com.