Privacy Policy
Only Gantt (the "Service") recognizes the importance of users' personal information, complies with the Japanese Act on the Protection of Personal Information and other related laws, and handles users' personal information appropriately in accordance with this Privacy Policy.
1. Information Collected
The Service may collect the following information:
- Account details such as name, email address, and profile picture
- Information entered while using the service, such as projects, tasks, and schedules
- Team information— team name, membership, each member's role, and the recipients and status of invitations
- Records of activity — who changed what, and when (the audit log, the activity feed, and the operation log used to synchronize collaborative editing)
- Presence — who is currently editing a team project and which rows they are working on. Held temporarily and discarded roughly 30 seconds after disconnection
- Bulk-deletion detection — when many tasks are deleted at once, the Service detects it and notifies team administrators so the change can be reviewed
- Snapshots of Gantt charts published as share links
- AI generation usage counts and a cache keyed on the submitted description
- Billing identifiers (Stripe customer ID and subscription status; card details are never stored by the Service)
- IP address, cookies, browser type, access logs, and other usage information
- Work created while signed out — stored only in your own browser and never transmitted to the Service's servers
2. Purpose of Use
Collected information is used for the following purposes:
- To provide, maintain, protect, and improve the Service
- For user authentication, identity verification, and account management
- To enforce permissions and provide activity history in team features
- To claim compensation for damages when they occur
- To respond to inquiries and send important notices
- To investigate violations of the terms of service and prevent misuse
- To create statistical data and perform analysis to improve the service
3. Usage Measurement (Analytics)
The Service uses Google Analytics (GA4) and Firebase Analytics to measure how the product is used, in order to improve it.
- The identifier used for measurement is a random string issued by the Service. Personal information such as your name or email address is never included in measurement events.
- What is measured are milestones of behaviour: first and repeat visits, the first editing action, AI generations, share links published / viewed / duplicated, template usage, and completed sign-ups and purchases.
- Measurement is not used for advertising, and no data is provided to advertising networks.
- Opt-out: you can disable measurement by refusing cookies in your browser settings, or by installing Google's Google Analytics Opt-out Browser Add-on. Opting out does not restrict any feature of the Service.
4. Retention Periods
| Data | Retention |
|---|---|
| Account details and project data | Until account deletion |
| Audit log | 2,557 days (approx. 7 years) by default |
| Activity feed (for on-screen display) | 7 days |
| Operation log (collaborative sync) | 90 days |
| Notifications | 90 days |
| Presence | Approx. 30 seconds after disconnection |
| Deleted teams and projects | Permanently removed after a 30-day grace period |
When you delete your account, your account details and project data are deleted. Audit log entries that form part of the record of other members' activity within a team may be retained for the period stated above.
5. Disclosure to Third Parties and Processors
The Service does not disclose personal information to third parties, except when required by law, when the user has consented, or when entrusting handling to a processor within the necessary scope. The Service currently uses the following processors:
- Google LLC — hosting, database, authentication, bot protection (reCAPTCHA Enterprise), usage measurement, and AI Gantt generation
- Stripe, Inc. — payment processing (card details are held by Stripe)
- Email delivery provider — recipient email addresses are provided in order to deliver notification email such as invitations and role changes
No data is provided to advertising networks.
6. Use of Cookies
The Service uses cookies and similar technologies for the following purposes:
- Authentication session — an HttpOnly, Secure cookie that cannot be read by JavaScript
- Display preferences — language, theme, and Gantt view state (one year)
- Usage measurement — see section 3
Users can refuse cookies via browser settings, but some functions may become unavailable as a result.
7. Security Measures
The Service takes necessary and appropriate technical and organizational measures to prevent leakage, loss, or damage of personal information. The concrete implementation is published in our security white paper.
8. Disclosure, Correction, and Deletion Requests
Users may request disclosure, correction, addition, deletion, or suspension of use of their personal information. Please contact our inquiry desk to make such requests.
9. Changes to This Policy
The Service may modify this policy as necessary. The modified policy takes effect from the time it is posted on the Service.
10. Contact
For inquiries regarding this policy, please contact us via the inquiry form or email address designated by the Service.