Privacy Policy

Pragma is a team task management tool operated by Pragma. This policy explains what data we collect, why we collect it, and how we handle it. We keep this short because we don't do anything complicated with your data.

What we collect

When you create an account, we store your name, email address, and a hashed password. We never store your password in plain text. If you were invited by a teammate, we store the invite token and its expiry until you complete registration, then delete it.

As you use Pragma, we store the content you create: organizations, projects, tasks, subtasks, assignees, deadlines, and task descriptions. This is the data that makes the product work.

We collect standard server logs — IP address, browser type, pages visited, and timestamps — for security and debugging. We do not use these logs to profile you or sell them to third parties.

What we don't collect

We don't run analytics scripts that track you across the web. We don't use advertising networks. We don't sell your data. We don't collect payment information directly — if we add paid plans, payments are handled by a third-party processor and we never see your card details.

How we use your data

We use your data for exactly three things:

• To operate the product — authenticate you, show you your tasks, send you notifications you've opted into.
• To send transactional emails — invite links, password resets, and task assignment notifications. These are sent via Resend and are not marketing emails.
• To debug and improve the service — server logs help us diagnose problems.

Data storage

Your data is stored in Cloudflare's infrastructure. Cloudflare operates data centers globally; your data may be stored and processed in multiple regions. Cloudflare's data handling practices are governed by their own privacy policy.

Data retention

We keep your data for as long as your account is active. If you ask us to delete your account, we will delete your personal data within 30 days. Task content belonging to an organization is retained until the organization owner requests deletion.

Your rights

You can request a copy of your personal data, ask us to correct inaccurate data, or ask us to delete your account and associated personal data. To do any of these, email us at hello@pragmas.app. We'll respond within 14 days.

Cookies

We use a single session cookie to keep you signed in. We don't use tracking cookies or third-party cookies. The session cookie is scoped to tasks.pragmas.app and expires when your session ends or after 30 days of inactivity.

Third-party services

We use the following third-party services to operate Pragma:

• Cloudflare — infrastructure, hosting, and edge network
• Resend — transactional email delivery

Each of these services has its own privacy policy. We share only the minimum data necessary for them to function.

Changes to this policy

If we make meaningful changes to this policy, we'll notify active users by email before the changes take effect. The date at the top of this page always reflects when it was last updated.

Contact

Questions about this policy? Email us at hello@pragmas.app.