Projectviate Privacy Policy
Last Updated: November 6, 2026 | Effective Date: November 1, 2026
1Our Privacy Commitment
At Projectviate, we treat the confidentiality of your team workflows, project tasks, documents, and credentials with enterprise-grade protection. We strictly operate on a zero-data-monetization policy: your workspaces, sprint boards, and proprietary plans belong entirely to you.
2Strict Tenant & Multi-Organization Isolation
Every project, board, and document is partitioned with strict multi-tenant boundaries on our Microsoft SQL Server 2022 infrastructure. Users in Workspace A cannot query, view, or correlate items belonging to Workspace B under any circumstance.
3BYOK AI Key Architecture & Cryptographic At-Rest Protection
- At-Rest Encryption: All user-provided OpenAI and Anthropic API keys are encrypted at rest using AES-256-GCM authenticated cipher with unique 12-byte initialization nonces.
- Zero Plaintext Exposure: Keys are never returned in plaintext to web browsers. Only non-sensitive fingerprints (e.g.
sk-••••abcd) are displayed. - No Central AI Account: Projectviate does not mandate a shared central master AI key; AI queries execute strictly through your personal provider quota.
- Prompt Sanitization: Internal secrets, credentials, and passwords are automatically redacted prior to outbound dispatch to OpenAI or Anthropic endpoints.
4Data Retention & Deletion
When you delete a task, project, or workspace, it is placed in a soft-deleted state for 30 days to protect against accidental loss. Following the 30-day window, records and associated file attachments are permanently purged from database replicas.