Privacy policy
Last updated: September 2, 2026
This policy describes what data Great Gantt (greatgantt.com) processes, why, who it is shared with and what your rights are, in line with Brazil's LGPD (Law 13,709/2018) and, where applicable, the GDPR.
Written in plain language on purpose. If anything is unclear, ask.
1. Data we process
Account: the name, e-mail and photo of the Google account used to sign in. We store no passwords.
Content: projects, tasks, comments, holidays, links and the e-mail addresses of the people you invite to collaborate.
Usage: a few essential navigation events — calls to action on the home page, sign-in start and completion, creation of the first project and of the first activity — tied to an anonymous identifier generated in your browser and, after sign-in, to your account. They tell us where first use gets stuck.
Payment: Stripe processes your card. We receive only the subscription status and billing identifiers.
Preferences: language, zoom, visible columns and dismissed hints are kept in your browser (localStorage).
2. Why we use it
To provide the service: compute schedules, save and sync your projects, send transactional e-mails (invites, mentions and notices), bill subscriptions and provide support.
To improve the product, based on the usage events described above. We do not sell personal data nor use it for third-party advertising.
3. AI generation
When you use "Generate with AI", the text you type is sent to Google's Gemini service to produce the schedule draft. Do not include sensitive personal data in that description.
4. Who we share it with
Providers required for the service to work: Supabase / Lovable Cloud (database and hosting), Google (sign-in and AI), Stripe (payments) and Resend (e-mail delivery). Each processes data under contract and only for the stated purpose.
People you share a schedule with: they see its content and your e-mail as the project owner.
Authorities, when required by law.
5. For how long
We keep your data for as long as your account exists. When you delete a project, its content is removed from the database. When you delete your account, identifying data is erased and usage events are anonymized. Billing records are kept for the period required by law.
6. Security
Data travels encrypted (HTTPS). Database access is restricted by per-user security rules (Row Level Security), so each person only reaches the projects they own or that were shared with them.
7. Your rights
You can request confirmation of processing, access, correction, portability and deletion of your data, and withdraw consent. Most of this you can do yourself in the app (edit or delete projects, export schedules). For the rest, use the contact below.
Legal bases: performance of a contract (providing the service), legitimate interest (security and product improvement) and consent, where applicable.
8. Cookies and local storage
We use no third-party tracking cookies. We use the browser's local storage to keep your session and preferences.
9. Changes
We will update this page when the policy changes. The date at the top shows the latest revision.
Contact
Questions about this document or about your data: write to contato@greatgantt.com.