Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create or modify your agency account, request support, or connect Monday.com boards. This includes names, emails, read-only OAuth tokens to integrate with Monday.com, and financial documents (such as vendor invoices, SOWs, purchase orders, and rate sheets) uploaded to the InvoiceGuard operations module.

2. How We Use Information & AI Processing

We use the information we collect to provide and maintain our services, specifically to sync project data into client portals and conduct automated invoice audits. For InvoiceGuard, documents are processed via pure-Python extraction, high-precision OCR (for scanned pages), and server-side LLMs under strict data-privacy boundaries. Sensitive financial data is never used for foundation model training.

3. Data Security & Column Scrubbing

Your OAuth tokens are encrypted at rest using industry-standard encryption. Uploaded invoice documents are stored securely as binary data (BYTEA) in PostgreSQL without intermediate disk files. Client portal sessions have zero access to internal financial reviews, rates, or developer notes. Users may permanently purge review data at any time.

4. Contact Us

If you have any questions about this Privacy Policy, please contact our privacy team at support@projectstory.io.