Privacy policy

Last updated October 28, 2026

Footprint (footprint-pm.com) is a project management app run by Jordan Craft (“we”, “us”). This page explains, in plain language, what we collect when you use it, why, who else touches it, and what you can do about it. Questions go to [email protected].

What we collect

Your account: your name, email address, a scrambled (hashed) copy of your password, an optional company name, and settings you choose, such as your theme, notification choices, two-step sign-in, and a calendar link you add to “Your day”.
What you put in a workspace: projects, tasks, comments, messages, files you upload, time entries, and any contacts, deals and invoices. This can include details about other people, such as customers you add. You and your workspace decide what goes in.
Data you import from other apps (Freedcamp, Trello, Asana, spreadsheets) when you choose to.
Technical data: your IP address and browser details in server and network logs, records of failed sign-in attempts (to slow down password guessing), your time zone, and error reports when something breaks.

We don't run ads, we don't use advertising or analytics trackers, and we don't sell or rent your data.

Why we use it

To run the app for you: sign you in, store and show your work, and share it with the people in your workspace.
To send email you need: sign-in codes, password resets, invites, and notifications you can switch off.
To keep it secure and working: stopping abuse, fixing bugs, and keeping backups.
To answer you when you contact us.

If you're in the EU or UK, our legal basis is that we need this data to provide the service you signed up for (contract), and our legitimate interest in keeping it secure and working.

Who can see it

People in your workspace can see what's shared with them there. Workspace owners and admins can manage members and export the workspace. We can access stored data to run, support and fix the service, and we only do that when needed.

We use a few other companies to run Footprint, and they handle data only to do that job for us:

Cloudflare, which carries all traffic between your browser and our server.
Resend, which delivers our emails.
Sentry, when turned on, which receives error reports so we can fix bugs.

The app and its database run on a server we operate in the United States. If you use Footprint from elsewhere, your data is transferred to and stored in the US.

We'll share data if the law requires it, to protect people's safety or our rights, or as part of a sale or transfer of the service (we'd tell you first).

Cookies

We use a sign-in cookie to keep you logged in and a time zone cookie so dates show correctly. Both are needed for the app to work. There are no tracking or advertising cookies. Since we don't track you across other sites, browser “Do Not Track” signals don't change anything.

How long we keep it

We keep your data while your account or workspace exists. When you delete a task, file, workspace or your account, it's removed from the live app right away, and it falls out of our backups within about 30 days. Logs are kept only as long as needed for security and troubleshooting.

Your choices and rights

Change your name, email, password and settings in Settings → Account.
Workspace owners can download everything in a workspace from Settings → Workspace.
Delete your account in Settings → Account, or a workspace you own in Settings → Workspace.
Turn off email notifications at any time.

Depending on where you live (for example the EU, UK or California), you may have the right to access, correct, delete or receive a copy of your data, to object to or limit how we use it, and to complain to your local data protection authority. Email [email protected] for anything you can't do yourself in the app, and we'll answer within 30 days. We don't sell or share personal information as California law defines those terms, and we don't treat you differently for using your rights.

If someone else added your details to their workspace (as a customer or contact, say), that workspace's owner controls that data. Contact them, or us and we'll pass it on.

Security

Traffic is encrypted, passwords are hashed, two-step sign-in is available, and workspaces are kept apart in the database. No system is perfectly secure, so please use a strong password. If a breach affects your data, we'll tell you as the law requires.

Children

Footprint isn't meant for children under 16, and we don't knowingly collect their data. If you think a child has signed up, tell us and we'll delete the account.

Changes

If we change this policy, we'll update the date above, and for big changes we'll let you know by email or in the app before they take effect.