Privacy Policy

Last updated: October 9, 2026

Our Terms of Service set out the agreement you are entering into. This policy is part of it.

This Privacy Policy explains how Juscribe ("Juscribe", "we", "us", or "our") collects, uses, and protects information when you use our project management application and website (collectively, the "Service"). By using the Service, you agree to the practices described here.

Information We Collect

We collect only the information needed to provide the Service:

Account information. When you create an account we collect your name, email address, and a password. Passwords are never stored in plain text — they are kept only as a salted cryptographic hash.
Signing in with Google. If you choose to sign up or sign in with Google, Google sends us your name, your email address once Google has verified it, your profile photo, and an account number that identifies you to us. We use them to create your account or to find the one you already have. We keep the account number, address and photo linked to your account until you disconnect Google in Settings or delete your account, and we do not share them with anyone. We ask Google for nothing else — not your contacts, your calendar or your files — and we do not keep the access token Google issues.
Signing in with GitHub. If you choose to sign up or sign in with GitHub, GitHub sends us your username, your name if you have set one, your email address, your profile photo, and an account number that identifies you to us. We use them to create your account or to find the one you already have. We keep the account number, username, address and photo linked to your account until you disconnect GitHub in Settings or delete your account, and we do not share them with anyone. We ask GitHub for your email addresses and nothing else — not your repositories or your code — and we do not keep the access token GitHub issues.
Signing in with Apple. If you choose to sign up or sign in with Apple, Apple sends us an account number that identifies you to us, an email address, and whether that address is one Apple made with Hide My Email to forward mail to you without revealing your own. Apple sends your name only the first time you sign in with Apple, and only if you choose to share it. We use these to create your account or to find the one you already have. We keep the account number and address linked to your account until you disconnect Apple in Settings or delete your account, and we do not share them with anyone. We ask Apple for your name and email address and nothing else. We keep the refresh token Apple issues, encrypted, only so we can tell Apple to revoke it when you disconnect Apple or delete your account.
Content you create. The Service stores the work you put into it — tickets, comments, projects, iterations, attachments, and related activity. This content belongs to you and the team or organization you share it with.
Mailing list. If you join our mailing list on the home page, we collect the email address you enter and nothing else. Joining does not create an account.
Usage analytics. This site and the Juscribe web app both use a self-hosted, cookieless analytics tool (Umami) that records aggregate, non-identifying statistics such as page views and referrers. It stores nothing on your device, it does not follow you to other companies' sites, and it builds no advertising profile. Umami’s data stays on our own server — it is never sent to, shared with, or cross-referenced against a third party. Visits are counted using a short-lived pseudonym derived from your IP address and browser, with a secret that changes every day, so the same visitor cannot be recognised from one day to the next. See Your choice about analytics below to turn it off.
Cloudflare Web Analytics. Cloudflare, which carries all traffic to this site and the web app, adds its own measurement script to every page as the page passes through its network. It records page views and how quickly each page loads and responds — the measures known as Core Web Vitals — along with the address of the page and of the page you came from, each with any query string removed. It sets no cookie and stores nothing on your device. Your IP address and browser details reach Cloudflare with each report, as they do with every request it carries for us. Cloudflare states that it does not use them to track visitors over time, and it reports visits to us by country, browser, operating system and type of device. This data is held by Cloudflare under its own retention rules, not on our server. See Your choice about analytics below for how to block it.
Diagnostics. Within the web application we use performance and error monitoring to detect crashes and keep the Service reliable. This may include technical details such as browser type, device information, and the actions that led to an error. The iPhone and Android apps send no crash or error report of their own.
The iPhone and Android apps. The apps collect less than this website does. Each sends your email address and password when you sign in, and after that your name, your account identifier and the work you put into the board — tickets, comments and the rest — because that is what it is showing you. A photo or file you attach to a ticket is uploaded when you choose it. Your sign-in token is held in the phone’s own secure storage: the keychain on an iPhone, and on Android, encrypted with a key held in the Android Keystore.
What the app keeps on your phone. So that it opens without a signal, the app keeps a copy of your board on the phone for up to seven days: its tickets outside the Done panel, its projects, labels and people, and the tickets you have opened, with their comments. The copy stays on the phone. Edits you make while offline wait there too, until they can be sent. By default the app downloads the whole board for this each time it opens, and now and then in the background; Keep the board available offline in the app’s Settings turns that download off, and the copy then holds only what you have already looked at. Signing out deletes the copy. The app also remembers your theme, your board filters and which workspace you had open.
What the app does not do. It runs no analytics and contains no analytics software. It sends no crash reports or diagnostics. It has no advertising identifier, no attribution or tracking framework, and does not follow you to any other company’s app or website. It cannot send you push notifications, because it has no notification software in it at all.
Cookies. One cookie, __Host-juscribe_session, which keeps you signed in and protects forms against cross-site request forgery. It is strictly necessary for the service to work. We set no advertising cookie, no third-party tracking cookie, and no analytics cookie — the analytics described above are cookieless. Our network provider, Cloudflare, can set security cookies of its own (__cf_bm, cf_clearance, __cflb, _cfuvid) when the corresponding protections are active; checked on 1 September 2026 across this site, the app and the analytics host, none of them was set.

How We Use Your Information

To provide, maintain, and improve the Service.
To authenticate you and keep your account secure.
To send essential account and Service-related communications.
To send occasional email about Juscribe if you joined our mailing list. Every message carries an unsubscribe link, and unsubscribing stops the next one.
To diagnose problems, monitor reliability, and prevent abuse.
To comply with legal obligations.

We do not sell your personal information, and we do not use your content to serve advertising.

How We Share Information

We share information only in these limited circumstances:

With your team. Content you create is visible to the other members of the workspaces and organizations you belong to.
With service providers. We rely on trusted infrastructure, hosting, analytics, and monitoring providers who process data on our behalf and only under instructions consistent with this Policy. One of them is Cloudflare, which carries every request to this site and the web app and provides the Cloudflare Web Analytics described above. Another is Resend, which delivers the email the Service sends and holds the addresses on our mailing list. WorkOS, which handles the sign-in when you connect a chat app to Juscribe, receives your name, email address and account id for that purpose. Your browser also visits WorkOS’s sign-in pages while you connect, so WorkOS sees your IP address and browser details, as any website does.
With our payment processor. If you subscribe to a paid plan, Stripe processes your payment on our behalf and receives the billing details you enter, including your card. Payment is taken on a page Stripe hosts, so we never see or store your full card details — we keep only what we need to run your subscription, such as your plan, its status, and the last four digits and brand of the card shown on your receipts.
For legal reasons. We may disclose information if required by law or to protect the rights, safety, and security of our users and the Service.
In a business transfer. If Juscribe is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

Connecting a Chat App

You can connect a chat app, such as ChatGPT, Claude or Gemini, to Juscribe and work on your boards from a conversation. Connecting is your choice, and this is what it involves:

What the app sends us. The app reads and changes your boards for you, so it sends us what you ask it to do: the tickets, comments and other content it writes on your behalf and, when you ask, files to attach to a ticket, such as a document it wrote or a file you added to a ChatGPT conversation. We store them like any other content you create.
What the app’s provider receives. What Juscribe sends back to the app goes to the company that runs it — OpenAI, Anthropic or Google — which handles it under its own privacy policy, not this one. That is the board content the app reads for you, including the names and usernames of teammates who appear on it.
What we keep about the connection. For each app you connect we keep which app it is, the AI agent it acts as on your boards, and when it last used Juscribe. We keep that record for as long as your account exists. When you delete your account, every app’s access ends at once; a record in an organization deleted with you goes with it, and one in a shared organization stays, anonymized, like the rest of your work there. The access a connection uses lasts an hour at a time and is renewed while the app stays connected.
Disconnecting. You can disconnect an app at any time under Connected chat apps in Settings, which stops it reaching your boards at once. Work it already did stays on your boards, under its agent’s name.

Data Retention

We retain your account information and content for as long as your account is active. When you delete your account or specific content, we delete or anonymize the associated personal data within a reasonable period, except where we are required to retain it to meet legal, accounting, or security obligations.

Our encrypted backups can hold a copy of deleted data for a time after that. It is removed from every backup within 100 days.

Umami’s analytics data is deleted after 25 months. A scheduled job removes every Umami record older than that, so nothing accumulates indefinitely. Cloudflare Web Analytics data is held by Cloudflare under its own retention rules, which we do not set.

An address on our mailing list stays there until you ask us to remove it. If you unsubscribe, it is kept and marked unsubscribed, which is what stops it being mailed again. To have it deleted entirely, write to us at the address under Contact.

Deleting Your Account

You can delete your account yourself from inside the Juscribe web app or the mobile app, at any time. Deletion is immediate and cannot be undone. How to delete your account sets out the steps.

Deleting your account removes your identity and everything private to you — your name, email address, password, profile photo, sign-in history, API tokens and sessions, notifications, bookmarks and reactions, and any AI agents you created. Organizations where you were the only member are deleted with you.

Work you contributed to a shared organization stays, anonymized. Tickets, comments and history your teammates are still working from remain in place, with your name replaced by "Deleted user" wherever it appeared. We keep the shared record because destroying a departing member's contributions would turn one person's decision into data loss for everyone they worked with. Your account is deleted; what is left is no longer attributed to you.

Data Security

We use industry-standard safeguards to protect your information, including encryption in transit, hashed passwords, and restricted access to systems that hold personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to protect your data.

Your Choice About Analytics

You can turn Umami off for this site, in this browser, at any time. The choice is stored on your own device and nothing is sent to us when you make it.

Analytics run only when JavaScript does. With JavaScript disabled, nothing is being recorded and there is nothing to turn off.

⚠ The choice applies to one site at a time, because it is stored by your browser per site. The button above covers juscribe.ai. To cover the web app as well, sign in and use the same control under Settings → Preferences at app.juscribe.ai. Enabling “Do Not Track” in your browser, or blocking analytics.juscribe.ai, covers both at once.

None of these turns off Cloudflare Web Analytics. Its script does not read the choice above or your browser’s Do Not Track setting, and it reports through the address of the page you are on, so blocking analytics.juscribe.ai does not reach it. To stop it, block static.cloudflareinsights.com in your browser or with a content blocker. The site works the same either way.

This choice is a website setting. The iPhone and Android apps have no analytics to turn off — they contain none, so there is no equivalent control in them and nothing for you to do there.

Your Rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your account and associated personal data.
Export your content in a portable form.
Object to or restrict certain processing.

To exercise any of these rights, contact us using the details below.

Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

International Users

Juscribe is operated from the United States, and your information may be processed and stored there or in other countries where our service providers operate. By using the Service, you consent to this processing.

Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, notify you through the Service.

Contact

If you have questions about this Privacy Policy or how we handle your information, reach us at contact (at) juscribe.ai.