Privacy Policy
We are committed to protecting your personal data. This policy explains what we collect, how we use it, and the rights you have over your information.
Overview
Focura ("we," "our," or "us") is a productivity and collaboration SaaS platform. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our website or use the Focura platform (collectively, the "Service").
We are committed to data minimisation — we collect only what we need, retain it only as long as necessary, and never sell your personal data to third parties.
Data We Collect
We collect different types of information depending on how you interact with the Service. The table below summarises the categories of personal data we collect, why we collect it, and how long we keep it.
| Data Category | Examples | Purpose | Retention |
|---|---|---|---|
| Account Data | Name, email, password hash, profile photo | Authentication, account management | Until account deletion + 30 days |
| Usage Data | Pages visited, features used, session duration | Product improvement, analytics (Google Analytics) | 14 months |
| AI Assistant Data | Prompts you send to the AI assistant, generated responses, token usage | AI-powered features (autocomplete, planning, summaries, insights) | Until account deletion |
| Integration Data | Connected accounts (GitHub, Slack, Google Calendar, Trello), synced data, encrypted access tokens | Integrations you connect | Until you disconnect or delete your account |
| Device & Log Data | IP address, browser type, OS, timestamps | Security, fraud prevention, debugging | 90 days |
| Workspace Content | Tasks, comments, files, project data | Core service delivery | Until deletion by user + 30 days |
| Payment Data | Last 4 digits, billing address, transaction ID | Billing and subscription management | 7 years (legal obligation) |
| Communications | Support emails, feedback, survey responses | Customer support, service improvement | 3 years |
* Retention periods may be extended where required by law or for the resolution of disputes and enforcement of agreements.
How We Use Your Data
We process your personal data only when we have a lawful basis to do so. The legal bases we rely on are:
- Contract performance — to create your account, provide the Service, and handle billing.
- Legitimate interests — to improve the platform, ensure security, and prevent fraud, provided these interests are not overridden by your rights.
- Consent — for optional features such as marketing emails and analytics cookies. You may withdraw consent at any time.
- Legal obligation — to comply with applicable laws, court orders, or regulatory requests.
Specifically, we use your data to:
- Provide, operate, and maintain the Focura platform and its features.
- Process transactions and manage your subscription.
- Send transactional emails such as account verification, password resets, and billing receipts.
- Detect, investigate, and prevent fraudulent transactions and other illegal activities.
- Personalise and improve your experience through product analytics.
- Respond to your support requests, comments, and questions.
- Send product updates, changelogs, and marketing communications (only with your consent).
- Comply with legal obligations and resolve disputes.
International Data Transfers
Focura is operated globally and your data may be transferred to, and processed in, countries other than your own. Where we transfer personal data outside the European Economic Area (EEA) or the UK, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Adequacy decisions recognising the destination country's data protection standards.
- Binding Corporate Rules where applicable.
You may request details of the specific safeguards applied to your data transfers by contacting us at privacy@focura.app.
Security & Data Protection
We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
- All data is encrypted in transit using TLS 1.2+ and at rest using AES-256.
- Passwords are hashed using Argon2id — we never store plaintext passwords.
- Authentication uses RS256-signed JWTs with short-lived access tokens and secure refresh rotation.
- Access to production systems is restricted to authorised personnel on a need-to-know basis.
- We conduct regular security reviews and dependency audits.
- Security events are logged and monitored with automated alerting.
Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data. We honour all of these requests within 30 days (or sooner where required by law):
Right to Access
Request a copy of the personal data we hold about you at any time.
Right to Rectification
Correct inaccurate or incomplete personal information in your account.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Portability
Request a copy of your data in a structured, machine-readable format, provided within 30 days.
Right to Restrict
Ask us to limit how we process your data in certain circumstances.
Right to Object
Object to processing of your data for direct marketing or profiling.
Right to Complain
Lodge a complaint with your local data protection authority at any time.
Right to Withdraw
Withdraw consent for data processing at any time without penalty.
To exercise any of these rights, email us at privacy@focura.app with the subject line "Privacy Request". We may ask you to verify your identity before processing the request. We will not discriminate against you for exercising your rights.
Children's Privacy
The Service is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information without parental consent, please contact us immediately at privacy@focura.app and we will take steps to delete such data promptly.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:
- 1We will update the "Last Updated" date at the top of this page.
- 2We will notify you via email or an in-app banner at least 14 days before the change takes effect.
- 3For significant changes to how we use your data, we will seek fresh consent where required.
We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
Contact & DPO
If you have questions, concerns, or requests relating to this Privacy Policy or how we handle your data, please reach out to us:
You also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national DPA within the EU) if you believe we have not handled your data lawfully.
Last Updated: August 11, 2026 · Version 1.1