Privacy policy
Last updated : 6 October 2026
ProjectPad is a tracking space that freelancers and agencies share with their own clients. This page sets out what we process, why, and what you can require of us. The French version at projectpad.fr/confidentialite prevails in case of any discrepancy.
Controller
KEIKO SAS, Centre d'Affaires Synergie SA, rue Lavoisier, ZI Sainte-Agathe, 57190 Florange, France. For anything concerning your data: privacy@projectpad.fr.
Who this concerns
Two audiences coexist in the service and they are not in the same position. Users open an account and take out a subscription. Invited clients reach a tracking space without an account, at the request of the user who invited them: for that data the user is the controller and we act as processor.
What we process, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email address, hashed password | Create and secure an account | Performance of the contract |
| Workspace name, logo, colour | Brand the space shared with clients | Performance of the contract |
| Projects, tasks, milestones, deliverables, messages | Provide the tracking service | Performance of the contract |
| Name, email and role of invited clients | Open their access and write to them | Legitimate interest of the inviting user |
| Deliverable approvals, with IP address and user agent at signature | Evidence a decision | Legitimate interest: securing an agreement |
| Satisfaction ratings and comments | Collect a client's opinion at the user's request | Legitimate interest |
| Billing details and payment history | Bill the subscription and keep accounts | Contract and legal obligation |
| Technical connection logs | Security, abuse detection, diagnosis | Legitimate interest |
We collect no special category data under Article 9 GDPR, and take no automated decision producing legal effects concerning you.
Retention
- Account and project content: for the life of the subscription, then twelve months after it ends.
- Invited client access: until the user closes it, or the link expires.
- Accounting records and invoices: ten years, under the accounting and tax obligations that apply to the publisher.
- Technical logs: twelve months.
Recipients
Your data is never sold, rented or traded. It is available to the members of our team who need it, and to the processors below, bound by contract to the same obligations as us.
| Processor | Role | Location |
|---|---|---|
| Stripe | Subscription payment and billing | United States, under standard contractual clauses |
| Scaleway | Storage of files uploaded to projects, and transactional email delivery | France |
| Sentry (Functional Software, Inc.) | Tracking technical errors in the application and the API | Germany; United States company, under standard contractual clauses |
The publisher is established in France, where the service and the files uploaded to it are hosted. Where a processor outside the Union is involved, the transfer is covered by the European Commission's standard contractual clauses.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability. Write to privacy@projectpad.fr and we answer within one month.
If you are an invited client, the person who invited you decides what their space contains. Ask them first; we will help if they do not answer.
You may also lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or with the supervisory authority of the country you live in.
Cookies
This website sets no analytics or advertising cookies. The application sets only what your sign-in and session require, plus local storage remembering your light or dark theme. These are strictly necessary to the service and do not require prior consent.
Security
Passwords are hashed and never readable. Client access codes are encrypted. Traffic runs over HTTPS. Reaching a tracking space combines an unguessable link with a six-digit code sent through a separate channel.
Changes
This policy will change as the service does. Any substantial change is announced by email or in the application before it takes effect.