Privacy Policy
This policy explains what personal data Planbook handles, why, and what you can do about it. For the content your team stores, your organisation is the controller and we process it on its behalf (see the Data Processing Agreement).
What we collect
| Data | Why |
|---|---|
| Name, email, avatar, Microsoft tenant ID | To sign you in and show you to your team |
| Tasks, comments, pages and files | To provide the service your team uses |
| IP address, device and usage events | Security, fraud prevention and understanding which features are used |
What we don't do
- We don't sell personal data or use it for advertising.
- We don't read your team's content except when you ask for support and give permission, or when the law requires it.
- We only ask Microsoft for your basic profile and email.
Cookies
We use one essential cookie to keep you signed in, and privacy-friendly analytics without third-party advertising cookies. No consent banner is needed for these, but you can block them in your browser.
Retention
Account data is kept while your account exists. Team content is deleted 90 days after a team ends, or 30 days after an Owner deletes it. Backups roll off within 30 days after that.
Your rights
You can access, correct, export or delete your personal data. Most of this is in Settings → Profile; for anything else email privacy@getplanbook.com. If you're in the EU or UK, you can also complain to your data protection authority.
Where data is stored
Primary data is stored in the European Union. Some subprocessors operate in the United States under the EU–US Data Privacy Framework or Standard Contractual Clauses.