Privacy Policy
Short version: your project data stays on your machine. Here's the whole story.
1. Who is responsible
The controller of the small amount of personal data described below is Ronen Aruch, operating GanttPulse (the final legal entity will be named here before sale opens). Contact for anything privacy-related: [email protected].
2. The app: nothing leaves your machine
GanttPulse is local-first. Your projects live in files on your own machine or server. The app has no telemetry, no analytics, no account system of ours, and it makes no network calls to us, ever. We could not see your project data even if we wanted to.
3. The AI assistant: your key, your provider
If you use the AI assistant, the context you choose to send goes directly from your machine to the AI provider you configured, authenticated with your own API key, under that provider's privacy terms. We are not in that path and never see your prompts. Point it at a local model and nothing leaves your machine at all.
4. This website
The site sets no cookies and does no cross-site tracking. Our hosting provider (Cloudflare) processes standard technical data (IP address, user agent) to serve pages and protect against abuse, per its own policies. We may use cookieless, aggregate visit counting (such as Cloudflare Web Analytics) that builds no personal profiles.
5. The beta waitlist
If you join the waitlist, we store your email address on our own infrastructure. It is used solely to tell you about the beta and launch, and is never shared or sold. Legal basis: your consent, which you can withdraw at any time by asking us to delete it. Retention: until the launch announcements are done or you ask for deletion, whichever comes first. Email [email protected].
6. Purchases and licenses
When checkout opens, payments will be processed by a payment provider / merchant of record (named at checkout), which handles your payment details under its own policy; we never see card numbers. To issue and support your license we keep your order email, license key ID, and the machine IDs you send us for activation or reissue. Legal basis: performing our contract with you and meeting bookkeeping duties. Retention: order records are kept as long as tax law requires, then deleted.
7. Support email
If you email us, we keep the correspondence so we can help you. That's it: no CRM enrichment, no marketing automation, and you are writing to the developer directly. Legal basis: our legitimate interest in providing support. Retention: as long as it is useful as support history, deleted on request.
8. Where data is processed
We use a small set of processors: Cloudflare (website hosting and the waitlist store), our email provider (support mail), and, once checkout opens, the payment provider named at purchase. Some of them operate global networks, so the technical and account data described above may be processed outside your country under those providers' standard contractual safeguards.
9. Your rights
You may ask what we hold about you, have it corrected or deleted, receive a copy, or object to a use, at any time: [email protected]. If you are in the EU, EEA, or UK you may also complain to your local supervisory authority; in Israel you have rights under the Privacy Protection Law. Since we hold almost nothing, this is usually a very short conversation.
10. Children
Neither the website nor the app is directed at children under 16, and we do not knowingly collect their data.
11. Security
The little we hold is protected by access controls and encryption in transit. Security researchers can reach us through the address published at /.well-known/security.txt. If a breach ever affects your data, we will notify you as applicable law requires.
12. Changes
If this policy changes, the new version is published here with a new date. We will not weaken the core promise, your project data never reaches us, because the architecture doesn't allow it.
Last updated: July 3, 2026 (draft).