Privacy Policy

Who we are

FocusRetro (“we”, “us”) provides the online retrospective service available at focusretro.com and app.focusretro.com. FocusRetro is operated from within the European Union and this policy is written to meet the requirements of the EU General Data Protection Regulation (GDPR). For any privacy question or request, contact [email protected].

What we collect

• Account data.When you sign in with Google we receive your name, email address, and profile picture. When you sign in through your company’s SSO (SAML), we receive the name and email your identity provider shares. We never see or store a password.
• Guest participants. People who join a board from an invite link do not need an account. We store only a display name and a random identifier so their cards and votes stay consistent during the session.
• Content you create.Boards, cards, votes, comments, action items, and workspace settings — this is your team’s data and we store it to provide the service.
• Team health checks. Health-check survey answers are stored as anonymous aggregates. Individual answers are never linked to a user identity, by design.
• Billing data. Payments are processed by Stripe. We store your plan and subscription status; full card details never touch our servers.
• Technical data. Standard server logs (IP address, browser type), a locale cookie, and session data needed to keep you signed in.
• Marketing site analytics. focusretro.com uses Google Analytics to understand how visitors find and use our marketing pages.

How we use your data

We use the data above to run the service (including syncing boards in real time between participants), process payments, respond to support requests, keep the platform secure and abuse-free, and understand how the product is used so we can improve it. We do not sell personal data, we do not share it with data brokers, and we do not show advertising.

Legal bases

We process account, content, and billing data because it is necessary to perform our contract with you. We process technical logs and security data based on our legitimate interest in keeping the service reliable and safe. Analytics on the marketing site is based on consent where required by law.

Who we share data with

We share data only with the service providers we need to operate FocusRetro:

• Google — sign-in (OAuth) and marketing-site analytics.
• Stripe — payment processing for paid plans.
• Cloudflare — content delivery, TLS, and protection against attacks.
• Atlassian (Jira) and Slack — only if you connect these integrations yourself. Integration credentials are stored encrypted and you can disconnect them at any time.

Where these providers process data outside the European Economic Area, transfers are covered by the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

How long we keep data

We keep your account and content for as long as your account is active. If you ask us to delete your account, we remove your personal data and content from production systems and it ages out of routine backups shortly after. Anonymous, aggregated data (such as health-check trends) may be retained because it cannot be linked back to you.

Your rights

Under the GDPR you can ask us for access to your data, a copy you can take elsewhere (portability), correction, deletion, restriction of processing, or object to processing based on legitimate interest. To exercise any of these rights, email [email protected] from the address linked to your account and we will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority — the data protection authority in your EU member state.

Deleting your account

To delete your account and all associated personal data, email [email protected] from your account email address. We will confirm the deletion once it is complete.

Children

FocusRetro is a workplace tool and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes to this policy

If we make material changes to this policy we will update the date at the top of this page and, for significant changes, notify account owners by email before the changes take effect.