Privacy Policy

How we handle your information

Last Updated: June 14, 2026  |  Effective Date: June 14, 2026

Our Commitment

You own your content and stay in control of it. PM Stage helps you organize and manage your work—we store only the minimum needed to run and secure the Service, while your primary creative files stay in your own storage. We don't sell your data, and you can export or delete what we hold at any time.

Quick Summary

  • • We only collect what we need to provide the Service
  • • Your creative work stays in your own storage
  • • We don't sell your personal data - ever
  • • We collect security data (IP, device info, activity logs) to protect your account
  • • You are responsible for your own backups
  • • You control your integrations and permissions
  • • You can request deletion of your data anytime

1. Overview

PM Stage ("we," "our," "us") is a project management and workflow platform for marketing and creative professionals. We are based in California, USA, and our Service is designed for users in the United States. This Privacy Policy explains how we collect, use, and protect your information when you use our website (pmstage.com) and service (collectively, the "Service").

Beta Notice: PM Stage is currently in development and testing. This Privacy Policy applies to the beta version of our Service.

US-Based Service: PM Stage is operated from the United States and subject to US law. By using PM Stage, you consent to the processing of your information in accordance with US law.

By using PM Stage, you agree to the collection and use of information as described in this policy. If you don't agree, please don't use the Service.

2. What We Collect

We follow a principle of data minimization—we only collect what we need to provide the Service.

2.1 Account Information

When you create an account, we collect:

  • Email address - For account access, notifications, and support
  • Name - To personalize your experience
  • Password - Stored securely using industry-standard hashing
  • Organization details - If you create or join an organization

2.2 Workflow & Project Data

To provide the Service, we store:

  • Project names, descriptions, and structures
  • Task metadata (titles, due dates, assignees, status)
  • Team and organization configurations
  • Form structures and submissions (if you use our forms feature)

2.3 Light Assets

For branding and customization, you may upload:

  • Organization logos
  • Profile pictures
  • Email banner images
  • Small branding assets

These are the only files we store directly. Your primary creative work stays in your own storage.

2.4 Usage & Device Data

We automatically collect:

  • Device information (browser type and version, operating system, device type)
  • IP address (for security, fraud prevention, and approximate geographic location)
  • Pages visited and features used
  • Timestamps of activity
  • User agent strings

2.5 Security & Session Data

To protect your account and detect unauthorized access, we collect:

  • Session information - Active sessions, login times, last activity timestamps
  • Device fingerprinting - Browser type, operating system, and device characteristics
  • Geolocation data - Approximate location derived from IP address
  • Login attempts - Successful and failed login attempts

2.6 Activity Logs

For security, troubleshooting, and organizational audit purposes, we maintain activity logs that may include:

  • Actions performed within the Service (creating, updating, deleting resources)
  • IP addresses and user agents associated with actions
  • Timestamps and affected resources
  • Organization administrators may access activity logs for their organization

2.7 Public Feature Analytics

If you use our public-facing features (forms, QR codes, business cards), we collect analytics data from visitors:

  • Form submissions - IP address, user agent, and submission timestamps for spam prevention
  • QR code scans - IP address, user agent, device type, approximate location, and scan timestamps
  • Business card views/clicks - IP address, user agent, device type, approximate location, and interaction timestamps

3. What We Don't Store

PM Stage is designed as an organizational layer—not a file storage solution. We store project metadata, task information, and small branding assets. Your primary creative work, documents, and deliverables remain in your own storage systems.

4. How We Use Your Data

We use the data we collect to:

PurposeData Used
Provide the ServiceAccount info, workflow data, light assets
Authenticate youEmail, password, session tokens
Send notificationsEmail address, notification preferences
Provide supportAccount info, usage data, activity logs
Improve the ServiceUsage data, feedback, analytics
Ensure securityIP address, device fingerprint, login attempts
Detect fraud & abuseIP address, geolocation, device info

We do not:

  • Sell your personal data
  • Use your data for advertising purposes
  • Share your data with data brokers
  • Train AI models on your content without consent

5. When We Share Data

We share data only in these limited circumstances:

5.1 With Your Organization

If you're part of an organization, your Organization Admin and team leads may see your activity within the organization's workspace.

5.2 Service Providers

We use trusted third-party service providers (sub-processors) to help operate the Service. They only access your data as necessary to perform services on our behalf and are contractually obligated to protect it. Our current sub-processors include: Supabase (authentication and database), Vercel (application hosting), Cloudflare (content delivery, file storage, and network security), and Google (Workspace/Gmail for email delivery, Gemini for optional AI features, and the Sheets/Drive integrations you choose to connect). We update this list as our providers change.

5.3 Legal Requirements

We may disclose data if required by law, court order, or to protect the rights, safety, or property of PM Stage, our users, or the public.

5.4 Business Transfers

If PM Stage is acquired or merged, your data may be transferred. We'll notify you of any such change.

6. Cookies & Tracking

TypePurposeDuration
EssentialAuthentication, security, basic functionalitySession / 30 days
PreferencesRemember your settings (theme, sidebar state)1 year
AnalyticsUnderstand usage patterns to improve the Service1 year

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using the Service.

7. Third-Party Services

PM Stage integrates with external services you choose to connect. When you authorize an integration:

  • We access data from that service as needed to provide functionality
  • We do not intentionally store copies of your external content beyond transient processing
  • The third party's privacy policy also applies to your data
  • You can disconnect integrations at any time
  • You are solely responsible for how you configure and authorize integrations

8. Data Security

We use reasonable security practices to protect your data, such as:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for sensitive data, where applicable
  • Secure password hashing
  • Access controls and logging

No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. You're responsible for keeping your login credentials safe.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your information within a reasonable timeframe, unless we are required to retain it for legal purposes.

9.1 Your Responsibility for Backups

PM Stage is not a backup, archival, or disaster recovery service. You are solely responsible for maintaining independent backups of your data and content.

10. Your Rights

We believe in giving you control over your data. All PM Stage users have the right to:

10.1 Access Your Data

Request a copy of the personal data we hold about you.

10.2 Correct Your Data

Update or correct inaccurate information through your account settings or by contacting us.

10.3 Delete Your Data

Request deletion of your account and associated data.

10.4 Export Your Data

Request an export of your data in a commonly used format.

10.5 Withdraw Consent

Where we rely on your consent, you can withdraw it at any time.

10.6 U.S. State Privacy Rights

Depending on where you live, your state's privacy law may give you additional rights (for example, California, Colorado, Connecticut, Texas, Virginia, and other states with comprehensive privacy laws). These can include the right to access, correct, delete, or obtain a portable copy of your personal information, and to opt out of its sale or sharing. We honor these rights for all U.S. users regardless of state. The California-specific details below also describe how these rights work in practice.

To exercise any of these rights, contact us at support@pmstage.com. We aim to respond within 45 days.

11. California Privacy Rights (CCPA/CPRA)

As a California-based company serving US users, we comply with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). California residents have the following rights:

11.1 Right to Know

You can request information about the categories and specific pieces of personal information we've collected, the sources, our business purposes, and who we share it with.

11.2 Right to Delete

You can request deletion of your personal information, subject to certain exceptions (such as completing a transaction or complying with legal obligations).

11.3 Right to Correct

You can request correction of inaccurate personal information we hold about you.

11.4 Right to Opt-Out of Sale/Sharing

We do not sell or share your personal information for cross-context behavioral advertising. We never have and never will.

11.5 Right to Limit Use of Sensitive Information

We only collect sensitive personal information (like account login credentials) as necessary to provide the Service, not for profiling or advertising.

11.6 Right to Non-Discrimination

We won't discriminate against you for exercising your privacy rights.

How to Submit a Request: Email support@pmstage.com with "Privacy Request" in the subject line. We'll verify your identity and respond within 45 days as required by law.

12. Children's Privacy

PM Stage is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn we've collected such information, we'll delete it promptly.

If you believe a child under 16 has provided us with personal information, please contact us at support@pmstage.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by:

  • Posting a notice on the Service
  • Sending an email to the address associated with your account
  • Updating the "Last Updated" date at the top of this page

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us.

Privacy Questions

We take your privacy seriously and aim to respond to inquiries promptly.

Email: support@pmstage.com
Website: pmstage.com