Privacy Policy
Last updated: October 31, 2026
1. Who we are
Simple Gantt (the website at www.simplegantt.net and the Simple Gantt application, together the “Service”) is operated by:
Maciej Dębiec, a natural person running Simple Gantt as an unregistered activity (działalność nierejestrowana)
ul. Piotrkowska 276a, 90-361 Łódź, Poland
Email: support@simplegantt.net
We (“we”, “us”) are the data controller for the personal data described in this policy, except where Section 3 says otherwise.
Simple Gantt shares one user account system with Simple WBS (wbs.simplegantt.net). Simple WBS has its own privacy policy for features specific to it.
2. What data we collect
- Account data. Name, email address, password (stored hashed by our authentication provider) or your Google account identifier if you sign in with Google, your profile picture (one you upload, or the one from your Google account), account creation date, your plan, and the product you signed up through (Simple Gantt or Simple WBS).
- Project data. Projects, tasks, descriptions, dates, deadlines, milestones, dependencies, statuses and assignments.
- Collaborator data. When you invite someone or add a teammate, we store the name you give them, their email address if you provide one, their role in the project, and an invitation link. A teammate can be added by name before they have an account.
- Profile pictures. A profile picture you upload is stored so your collaborators can see it next to your tasks. It is kept at a public link: anyone who has the exact link can view the image, but it isn’t listed or searchable. You can replace it at any time in your profile, ask us to remove it, and it is deleted when you delete your account.
- Billing data. If you buy a paid plan, our payment provider Stripe processes your card details. We never see or store your full card number. We store your Stripe customer ID, plan and payment status, and keep invoices and transaction records.
- Signup source. If you accept analytics, we record how you reached us: the referring website, landing page and campaign parameters (for example, that you came from a Google search or an ad), and attach it to your account when you sign up.
- Usage and device data. IP address, browser and device type, pages visited, and actions within the app (for example, creating a task), collected through cookies and analytics tools as described in Section 6. We do not use analytics to read the content of your projects.
- Communications. Emails you send us, bug reports and support requests.
3. Data you put in on behalf of your organisation
When a company or team uses Simple Gantt, its members often enter other people’s personal data, for example teammates’ names, emails and the tasks assigned to them. For that content, the organisation is the controller and we act as its processor: we process it only to provide the Service, on the organisation’s instructions. Business customers can request our Data Processing Agreement at support@simplegantt.net.
If you were added to someone else’s project, please contact the project owner first with questions about that project’s content. You can always contact us too.
4. Why we use your data and on what legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6(1)) |
|---|---|---|
| Creating and running your account, storing and showing your projects, collaboration and invitations | Account, project, collaborator data | Performance of our contract with you (b) |
| Sending service emails (invitations, password resets, account and billing notices) | Account and collaborator data | Contract (b); for invitees, our legitimate interest in delivering invitations sent by users (f) |
| Taking payments, issuing invoices, keeping accounting records | Billing data | Contract (b); legal obligation under Polish tax and accounting law (c) |
| Keeping the Service secure, preventing abuse and fixing bugs | Usage, device and account data, bug reports | Legitimate interest in a secure, working Service (f) |
| Product analytics and understanding which channels bring users | Usage and device data, signup source | Your consent (a), see Section 6 |
| Measuring ads and showing relevant ads | Cookie and device data | Your consent (a), see Section 6 |
| Product news and marketing emails | Email address | Your consent (a), given separately and never assumed. You can unsubscribe at any time |
| Answering support requests | Communications | Legitimate interest (f) or contract (b) |
Where we rely on legitimate interest, you can object at any time (Section 9).
5. Who we share data with
We do not sell your personal data. We share it only with service providers that process it on our behalf under data processing agreements:
| Provider | What for | Where data is processed |
|---|---|---|
| Supabase, Inc. | Database, authentication and file storage (profile pictures) | United States |
| Vercel, Inc. | Hosting the website and app | United States |
| Stripe | Payments and invoicing | European Union and United States |
| PostHog | Product and website analytics | European Union |
| Google (Google Sign-In, Google Analytics, Google Ads, Google Tag Manager) | Sign-in, website analytics, ad measurement | United States and other countries |
| Meta Platforms (Meta Pixel) | Ad measurement on Facebook and Instagram | United States and other countries |
| home.pl S.A. | Sending emails (invitations, account emails) | Poland |
We may also disclose data where the law requires it, to protect our rights, or to a buyer if Simple Gantt is ever sold (you would be told in advance).
6. Cookies and similar technologies
- Strictly necessary. Authentication cookies from Supabase keep you signed in and your session secure. They are set on the simplegantt.net domain so one login works across Simple Gantt and Simple WBS. They are always active because the Service can’t work without them.
- Analytics (PostHog). Used to understand how the website and app are used so we can improve them. Set only after you accept analytics, whether or not you are signed in.
- Advertising (Google Tag Manager, Google Analytics, Google Ads, Meta Pixel). Used on our public website to measure our ad campaigns and show relevant ads. Set only after you accept them in the cookie banner.
You can decline as easily as you accept, and change your choice at any time through “Cookie Settings” in the website footer or “Privacy & cookies” in the app menu. Declining analytics or advertising doesn’t affect any feature of the Service.
7. Transfers outside the European Economic Area
Some of our providers are in the United States, and your account and project data is stored in the United States. We transfer data outside the EEA only with a safeguard recognised by EU law: the provider’s certification under the EU-US Data Privacy Framework, or the European Commission’s Standard Contractual Clauses included in our agreements with them. You can ask us for a copy of the relevant safeguards at support@simplegantt.net.
8. How long we keep data
| Data | How long |
|---|---|
| Account, project and collaborator data | While your account exists, including when it’s inactive. When you delete your account, your data is deleted from our database immediately and disappears from backups within 7 days (our daily backups are kept for 7 days). |
| Invitations not yet accepted | Until the invitation is accepted or revoked, or the project is deleted. |
| Billing and invoice records | 5 years from the end of the calendar year of the payment, as required by Polish tax law. |
| Analytics data | Up to 24 months. |
| Support emails and bug reports | 24 months after the issue is closed. |
| Marketing email consent | Until you unsubscribe. |
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you
- correct inaccurate data
- delete your data (“right to be forgotten”)
- restrict how we use your data
- receive your data in a portable, machine-readable format, and have it sent to another service
- object to processing based on our legitimate interest, and to direct marketing at any time
- withdraw consent at any time, without affecting processing before the withdrawal
- lodge a complaint with a supervisory authority. In Poland this is the Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. If you live elsewhere in the EEA, you can complain to your local authority.
To use your rights, email support@simplegantt.net. We’ll reply within one month. We may ask you to confirm your identity first. For a copy of your data, see Data Export and Hosting.
10. Is providing data required?
You need to provide an email address (or sign in with Google) to create an account; without it we can’t provide the Service. Everything else, including cookie consent, is optional.
11. Automated decisions
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. Task statuses like “At Risk” or “Delayed” are calculated from your project dates; they are features of the tool, not decisions about you.
12. Children
The Service is not intended for anyone under 16, and we don’t knowingly collect their data.
13. Security
We protect data with encryption in transit (HTTPS), access controls and database row-level security that limits each user to their own projects, and by using established infrastructure providers. No system is completely secure; if a breach affects your data, we’ll notify you and the authorities as the law requires.
14. Changes to this policy
We’ll post changes on this page with a new “Last updated” date. If changes are significant, we’ll tell you by email or in the app before they apply.
15. Contact
Maciej Dębiec
ul. Piotrkowska 276a, 90-361 Łódź, Poland
Email: support@simplegantt.net