Privacy policy
Last updated: October 14, 2026
This policy describes what data Great Gantt (greatgantt.com) processes, why, who it is shared with and what your rights are, in line with Brazil's LGPD (Law 13,709/2018) and, where applicable, the GDPR.
Written in plain language on purpose. If anything is unclear, ask.
1. Data we process
Account: your e-mail and, when you sign in with Google or Microsoft, that account's name and photo. If you create a password, we store only an encrypted version of it, never the password itself.
Content: projects, tasks, comments, holidays, links and the e-mail addresses of the people you invite to collaborate.
Usage: a few essential navigation events — calls to action on the home page, sign-in start and completion, creation of the first project and of the first activity — tied to an anonymous identifier generated in your browser and, after sign-in, to your account. They tell us where first use gets stuck.
Payment: on the website, Stripe processes your card. In the Mac app, Apple processes the purchase. We receive only the subscription status and billing or transaction identifiers.
Preferences: language, zoom, visible columns and dismissed hints are kept in your browser (localStorage).
2. Why we use it
To provide the service: compute schedules, save and sync your projects, send transactional e-mails (invites, mentions and notices), bill subscriptions and provide support.
To improve the product, based on the usage events described above. We do not sell personal data nor use it for third-party advertising.
3. AI generation
When you use "Generate with AI", the text you type is sent to Google's Gemini service to produce the schedule draft. Do not include sensitive personal data in that description.
4. Who we share it with
Providers required for the service to work: Supabase / Lovable Cloud (database and hosting), Google (sign-in, AI and visit statistics through Google Analytics), Microsoft (sign-in), Stripe and Apple (payments) and Resend (e-mail delivery). Each processes data under contract and only for the stated purpose.
People you share a schedule with: they see its content and your e-mail as the project owner.
Authorities, when required by law.
5. For how long
We keep your data for as long as your account exists. When you delete a project, its content is removed from the database. When you delete your account, identifying data is erased and usage events are anonymized. Billing records are kept for the period required by law.
6. Security
Data travels encrypted (HTTPS). Database access is restricted by per-user security rules (Row Level Security), so each person only reaches the projects they own or that were shared with them.
7. Your rights
You can request confirmation of processing, access, correction, portability and deletion of your data, and withdraw consent. Most of this you can do yourself in the app (edit or delete projects, export schedules and delete your account under Subscription > Delete account). For the rest, use the contact below.
Legal bases: performance of a contract (providing the service), legitimate interest (security and product improvement) and consent, where applicable.
8. Cookies and local storage
We use Google Analytics to measure visits and page usage, such as which pages are opened and where visitors come from. It sets first-party cookies on our site, such as _ga, holding a random identifier with no name or e-mail. We do not use this data for advertising.
We also use the browser's local storage to keep your session and preferences.
You can delete or block these cookies in your browser settings or install the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout).
9. Changes
We will update this page when the policy changes. The date at the top shows the latest revision.
Contact
Questions about this document or about your data: write to contato@greatgantt.com.