Follow-UP

1. Introduction

IKTANIT ("we", "us", or "our") operates Follow-UP, a project management and task tracking application available at https://follow-up.iktanit.com. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our service.

By using Follow-UP, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you register for an account, we collect your name, email address, and password. Your password is securely hashed using bcrypt and is never stored in plain text.

2.2 Task and Project Data

We store the data you create within Follow-UP, including tasks, projects, phases, categories, time tracking entries, custom fields, notes, and other project management content.

2.3 Calendar Integration Data

When you connect external calendar services, we access calendar data through OAuth authorization:

• Google Calendar: We request access using the following OAuth scopes: openid, email, profile, and https://www.googleapis.com/auth/calendar.events. This allows us to read and write calendar events for synchronization.
• Microsoft Outlook: We request access using OAuth scopes including openid, profile, email, offline_access, and Calendars.ReadWrite. This allows us to synchronize calendar events with your Outlook account.

2.4 Usage Data

We may collect technical information such as your IP address, browser type, and access times through server logs.

3. How We Use Your Information

• Provide, maintain, and improve the Follow-UP service
• Synchronize calendar events between Follow-UP and your connected calendar accounts
• Authenticate your identity and manage your session
• Send service-related communications
• Ensure the security and integrity of our service

4. Third-Party Services

Follow-UP integrates with the following third-party services:

• Google Calendar API — for calendar event synchronization. Google's use of your data is governed by the Google Privacy Policy.
• Microsoft Graph API — for Outlook calendar synchronization. Microsoft's use of your data is governed by the Microsoft Privacy Statement.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

5. Google API Services — Limited Use Disclosure

Follow-UP's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we:

• Only use Google Calendar data to provide and improve calendar synchronization features within Follow-UP
• Do not use Google Calendar data for serving advertisements or for any purpose unrelated to the Follow-UP service
• Do not transfer Google Calendar data to third parties unless necessary to provide the service, comply with applicable laws, or as part of a merger or acquisition with notice to users
• Do not use Google Calendar data for purposes that are undisclosed in this Privacy Policy
• Allow users to revoke access to Google Calendar data at any time through the Follow-UP settings or through their Google Account permissions

6. Data Storage and Security

Your data is stored in a PostgreSQL database. We implement appropriate security measures to protect your personal information:

• Passwords are hashed using bcrypt
• All communications are encrypted using HTTPS/TLS
• Authentication sessions are managed using JSON Web Tokens (JWT) with limited expiry
• OAuth tokens for calendar integrations are stored securely and used only for authorized synchronization

7. Data Retention and Deletion

We retain your personal data for as long as your account is active or as needed to provide the service. If you wish to delete your account and associated data, please contact us at [email protected].

You may disconnect calendar integrations at any time through the Follow-UP settings, which will remove stored OAuth tokens for that service.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data
• Revoke calendar integration permissions at any time through Settings
• Export your data upon request

To exercise any of these rights, contact us at [email protected].

9. Cookies and Local Storage

For information about how we use cookies and browser storage, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.