Privacy Notice

Who we are

One Project Services Limited ("we", "us") provides Schedule Summariser and is the data controller for the personal data described here, under UK GDPR and the Data Protection Act 2018.

What we collect and why

• Account details (email address, password stored securely as a hash) — to create and run your account. Legal basis: contract.
• Files and summaries you save (schedule files, chosen settings, exports) — to provide the library. Legal basis: contract.
• Licence details (company name, licensed user) — to validate licence codes. Legal basis: contract.
• Subscription status (plan, renewal dates) — to give paying customers access. Legal basis: contract.
• Technical data (IP address, device and browser details, logs) — for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
• Messages you send us — to provide support. Legal basis: legitimate interests.

Schedules you open without saving are processed in your browser and are not sent to us.

Who we share it with

• Service providers who host and run the Service for us (hosting, database and storage).
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing. Paddle handles payment details directly; we never see your card.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

We do not sell your data.

International transfers

Some providers may process data outside the UK/EEA. Where they do, we rely on adequacy decisions or standard contractual clauses to protect it.

How long we keep it

We keep account data and saved files while your account is active. When you delete files or close your account, we delete or anonymise the data within a reasonable period, except where we must keep records by law (for example tax records).

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and private, per-user storage.

Your rights

You have the right to access, correct, erase, restrict or object to processing of your data, to data portability, and to withdraw consent where we rely on it. We respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We only use essential storage needed to keep you signed in and remember your licence activation. We do not use analytics or marketing cookies.