Privacy Policy

Introduction

This Privacy Policy explains how Monovi Bilgi Teknolojileri Yayıncılık San. Tic. A.Ş. (“Monovi”, “we”, “us”) processes personal data in connection with Projectman and our public websites. It should be read together with our KVKK Disclosure (for users in Turkey), Cookie Policy, and Terms of Service.

By using Projectman, you acknowledge that you have read this policy. If you do not agree, please do not use the service.

Controller and processor roles

Monovi is the data controller for personal data needed to operate your user account, secure the platform, communicate with you, and meet legal obligations.

When an organization uses Projectman to store data about its own clients, employees, or partners, that organization is generally the data controller for such content. Monovi processes that content as a data processor on the organization’s documented instructions, subject to applicable agreements.

Information we collect

• Information you provide: registration details, profile fields, organization settings, content you create (tasks, tickets, CRM records, attachments, comments).
• Information from your organization: invitations, role assignments, access restrictions, billing contacts.
• Automatic data: device and browser information, IP address, usage logs, diagnostic events, cookie identifiers (see Cookie Policy).
• Third-party authentication or security services where enabled (e.g. Google reCAPTCHA on sign-in).

How we use personal data

1. Provide and maintain Projectman features you or your organization enable.
2. Authenticate users and enforce permissions across organizations and projects.
3. Send transactional communications (invitations, security alerts, ticket updates).
4. Monitor, detect, and prevent security incidents, abuse, and fraud.
5. Comply with law and respond to lawful requests.
6. Improve reliability and usability using aggregated or de-identified metrics.

Sharing and subprocessors

We share personal data only with service providers that help us deliver Projectman, under contracts requiring appropriate confidentiality and security. Categories include cloud hosting/database (including Supabase infrastructure), email delivery, and optional security services (reCAPTCHA). A current list may be requested at [email protected].

We may disclose information if required by law, to protect rights and safety, or in connection with a merger or asset transfer with notice where legally permitted.

International transfers

Projectman may be hosted or backed up in jurisdictions outside your country. Where required, we implement appropriate safeguards for cross-border transfers, including contractual protections and compliance with KVKK and applicable international frameworks.

Data retention

We retain personal data only as long as necessary for the purposes described in this policy, to provide the service, resolve disputes, enforce agreements, and meet legal retention requirements. Retention periods vary by data category; see our KVKK Disclosure for representative timelines.

Security

We apply industry-standard safeguards including TLS encryption, access controls, organization-scoped data isolation, audit logging, and secure development practices. You are responsible for maintaining strong passwords and managing access within your organization.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability where technically feasible. Turkish residents should refer to our KVKK Disclosure for Article 11 rights and application procedures.

Contact: [email protected] — subject “Privacy request”. We may verify identity before fulfilling requests.

Children

Projectman is a business software service not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us for deletion.

Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date. Continued use after changes constitutes acceptance where permitted by law.