PRIVACY POLICY FOR CBA UTILS PROJECT MANAGEMENT
Last Updated: November 8, 2026
1. INTRODUCTION
CBA Utils Project Management ("we," "our," or "us") provides a collaborative project management web application. This Privacy Policy outlines how we collect, use, process, and protect your information when you interact with our platform and services.
2. INFORMATION WE COLLECT
We collect information to provide, maintain, and improve our services. This includes:
A. Account and Profile Information:
- Email address, display name, profile photo, department, and role designations.
- Authentication tokens and session identifiers managed via Firebase Auth.
B. User Content and Workspace Data:
- Data created or uploaded within the application, including project details, tasks, uploaded files, online documents, discussions, comments, events, and activity logs.
C. Log and Technical Data:
- Server logs, browser type, IP addresses, access timestamps, and usage metrics for system maintenance, security auditing, and performance monitoring.
3. HOW WE USE YOUR INFORMATION
We use the collected information for the following operational purposes:
- To authenticate users and maintain authorization boundaries (staff/admin controls).
- To enable project management functionality, including real-time collaboration, activity feeds, metrics tracking, and notifications.
- To store, retrieve, and preview uploaded files, code files, and documents.
- To secure the platform against unauthorized access, probe attempts, and abuse.
4. DATA STORAGE AND SECURITY
- Infrastructure: Data is stored and processed using Google Cloud Platform / Firebase infrastructure (including Firebase Authentication, Firestore, Realtime Database, App Hosting, and Cloud Storage).
- Access Control: Access to data is strictly regulated through server-side authorization guards and database security rules. Service calls and API routes enforce strict access policies.
- Data Transits: All traffic to and from the platform is encrypted in transit using standard Transport Layer Security (TLS).
5. DATA SHARING AND THIRD-PARTY SERVICES
We do not sell, rent, or trade your personal information. Data is only shared with third-party infrastructure providers necessary to run the service:
- Firebase / Google Cloud Platform (for Hosting, Authentication, Database, and Cloud Storage).
We may also disclose information if required to do so by law, court order, or governmental regulation, or to protect the rights, property, and safety of our system, users, or the public.
6. DATA RETENTION AND DELETION
- We retain personal data and project content for as long as your account remains active or as needed to provide project management services.
- Account administrators may request data deletion or resource removal in accordance with organizational policies.
7. YOUR RIGHTS
Depending on your jurisdiction and organization settings, you may have the right to:
- Access, correct, or update your profile data.
- Request an export of your content.
- Request the deletion of your account or personal data.
8. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our platform or legal obligations. We will notify users of any material changes by updating the "Last Updated" date at the top of this policy.
9. CONTACT INFORMATION
For questions or concerns regarding this Privacy Policy or our data practices, please contact your CBA Utils project administrator or system manager.