Privacy policy

• Account details: your email address and sign-in information.
• Organization details: name, logo, members and their roles.
• Content you create: projects, notes, interview answers, documents, versions, approvals, templates and knowledge-base documents.
• Usage records: AI usage (who, when, which model, token counts), governance emails sent, and data exports.
• Billing details: plan and billing contact. Card details go directly to Stripe.

Only to provide the service: drafting and governing your PMO documents, sending governance emails you can switch off, billing, and keeping your account secure. We do not sell your data or use it for advertising.

Your organization is the controller of the content its people create; we process it on your organization's behalf. We use these subprocessors:

• Lovable Cloud (built on Supabase, hosted on AWS): database, sign-in and private file storage (logos) (EU — Ireland (AWS eu-west-1)).
• Lovable hosting (Cloudflare edge network): runs the web application and server functions (Global edge network).
• Lovable AI Gateway, routing to OpenAI models: ai drafting, interviews, consistency checks and document import (Not confirmed; may be outside the EU).
• Resend (through the Lovable connector gateway): governance notification emails (Not confirmed (United States based provider)).
• Stripe: subscription billing (Not confirmed (United States based provider)).

See Security and AI data use for detail.

• Customer content is kept while the organization's account is active.
• Users can request deletion of their account; organization admins can request deletion of the whole organization. Requests are completed within 30 days.
• When a user is deleted, governance records they took part in stay in place and show "Deleted user" so other people's approval history remains intact.
• When an organization is deleted, all of its projects, documents, history, members, templates and logs are removed. A minimal record that a deletion took place is kept.
• Daily backups roll off after about 14 days, so deleted data disappears from backups within that window.

• Organization admins can download all organization data at any time from Organization settings.
• You can request deletion of your account from Organization settings.
• You can switch off approval emails in your notification settings.
• For anything else, email info@pmogateway.com.