Home/Privacy

Privacy

What We Hold, Why We Hold It, and What We Never Do with It

Draft: not yet reviewed by a lawyer. This page accurately describes how the software behaves, and it has not been through legal review. Have a solicitor read it before you rely on it commercially or hand it to a client's procurement team.

Last updated 10 October 2026. ProVo PM.

The Short Version

  • Your project data lives on our servers, isolated to your workspace. Tasks, hours, rates, budgets, client names, risks, defects and migration counts are held there so your team can work a plan together; section 3 says exactly what else we hold.
  • Beyond Your Project Data, We Hold: the name and work email each person signs in with, who changed what in each project, what you type into the contact form, and your plan and billing status.
  • We Do Not Sell or Share Your Data, and we do not run advertising or tracking on this site.
  • There Is No Analytics on This Website at the time of writing. If that changes, this page changes first.

1. Who We Are

ProVo PM operates this website and service. For anything on this page, including a request to see or delete what we hold, write to us via the contact page.

2. Your Project Data

This is the part that matters most, so it goes first.

ProVo PM is a cloud product: your workspace's project content (tasks, hours, rates, budgets, risks, defects, migration counts, notes and client names) is held on Google Cloud in a US region, encrypted in transit and at rest, isolated to your firm alone and backed up daily, so several people can work the same plan together. Every change is stored with the name of the person who made it.

Every tracker exports as CSV at any time. Keeping your own copies of those exports is your responsibility, and we recommend exporting at each gate.

3. What We Do Receive

DataWhyKept For
Contact Form
Name, email, firm, topic, message
To answer you, and to keep a record of the conversation if you become a customer.Until you ask us to delete it, or two years after our last exchange.
Billing Details
Handled by our payment processor
To take payment and meet accounting obligations. We do not see or store full card numbers.As long as tax and accounting law requires.
Sign-In and Membership
Name, work email, role, plan and seat limits
To let the right people into your workspace, apply their role, and record who made each change. Never sold or shared.While your workspace is active. Change history is deleted with its project.

4. Cookies and Tracking

This website sets no analytics or advertising cookies and runs no third-party tracking scripts. That is why you have not been asked to accept anything.

The application keeps a small amount in your browser's storage, such as the Estimator worksheet, which stays on that device until you choose to apply an estimate to the project. That is local persistence, not tracking. Your project data itself is held on our servers as described above.

5. Third Parties

These, and only for the purposes named:

  • Google Cloud, which hosts the application and its database in a US region (us-central1).
  • Cloudflare, which sits in front of the application and handles sign-in through Cloudflare Access.
  • Your Own Identity Provider, which confirms who is signing in. It is chosen and controlled by your firm.
  • A Payment Processor, to take subscription payments and act as merchant of record.
  • A Public Font CDN, which the application requests when it opens. That request carries no project content. This website does not use one; it serves its own fonts, so visiting these pages contacts no third party. If your client's policy forbids outbound CDN calls from the application, tell us and we will work through it with you.

6. Your Rights

Depending on where you live, you may have the right to ask for a copy of what we hold about you, to have it corrected or deleted, or to object to how we use it. Ask and we will do it. Project content belongs to your firm, so requests about it usually go through your firm's ProVo PM admin.

7. Changes

If this policy changes in a way that affects what we collect, we will change the date at the top and tell existing customers directly rather than relying on you to re-read the page.

Client security review? Send the actual questionnaire rather than working from this page. The security page covers sign-in, encryption, isolation and backups. The technical detail is here →