Privacy Policy

Introduction

INTEGRITY SOFTWARE LIMITED ("Company", "we", "us", "our", or "we") operates the RedminePlus cloud platform. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data Controller: INTEGRITY SOFTWARE LIMITED, 71-75 Shelton Street, London, UK, WC2H 9JQ is the data controller responsible for your personal data.

Effective Date: January 1, 2024. This policy may be updated periodically. We recommend reviewing it regularly.

Information We Collect

We collect the following types of personal information:

• Account Information: Full name, email address, phone number, company name, and billing information.
• Technical Information: IP address, browser type, device information, and usage logs when you access our service.
• Project Data: Any content, files, or information you upload to your Redmine instance.
• Communication Data: Messages, support tickets, and correspondence with our support team.
• Analytics Data: How you interact with our website and service, collected through analytics tools.

How We Use Your Information

We use your personal information for the following purposes:

• To provide, maintain, and improve the RedminePlus service
• To process payments and send billing information
• To send service updates, security notices, and support responses
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations and respond to lawful requests
• To monitor and analyze usage patterns and service performance
• To contact you about changes to our services or policies
• To respond to your inquiries and provide customer support

Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal bases:

• Contract: Processing necessary to provide the service you requested and maintain your account.
• Legitimate Interest: Improving our services, preventing fraud, and analyzing service usage.
• Legal Obligation: Complying with tax, accounting, and other legal requirements.
• Consent: Sending marketing communications (only with your explicit opt-in consent).
• Data Protection: Protecting the rights, safety, and security of our users and service.

Data Sharing

We do not sell, trade, or share your personal information with third parties for their marketing purposes. We may share data in the following circumstances:

• Service Providers: With vendors who help us provide the service (hosting providers, payment processors, support platforms) under strict data processing agreements.
• Legal Requirements: When required by law, court order, or government request.
• Business Transfers: If we are acquired or merge with another company, your data may be transferred as part of that transaction.
• Your Consent: When you explicitly authorize us to share your data with a third party.

International Data Transfers

All personal data is stored on servers located in the EU. If we transfer data to countries outside the EU, we do so only with adequate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

You have the right to know the mechanisms used for international transfers. Contact us for specific details about any data transfers affecting your information.

Data Retention

We retain your personal information for as long as necessary to:

• Provide the RedminePlus service to you
• Comply with legal and regulatory obligations
• Resolve disputes and enforce agreements

When you delete your account, your project data is retained for 30 days to allow for recovery, then securely deleted. Backups may be retained for up to 90 days for disaster recovery purposes.

Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of your personal data in a machine-readable format.
• Right to Rectification: You can correct inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data (subject to legal obligations).
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on legitimate interest or for direct marketing.
• Right to Lodge a Complaint: You can file a complaint with your local data protection authority.

To exercise any of these rights, contact us at info@redmineplus.com

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience, authenticate you, and analyze usage.

• Essential Cookies: Required for authentication and service functionality.
• Analytics Cookies: Help us understand how users interact with our service.
• Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling certain cookies may affect service functionality.

Data Security

We implement industry-standard security measures to protect your personal data, including encryption, access controls, and regular security audits. However, no method of transmission over the internet is completely secure.

If you suspect a data breach, please notify us immediately at info@redmineplus.com

Children's Privacy

RedminePlus is not intended for children under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that a child has provided us with information, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by email or through our service. Your continued use of RedminePlus after changes constitutes acceptance of the updated policy.