Privacy Policy
GovernXT ("we", "us") provides an enterprise Project Portfolio Management platform at www.governxt.com. This policy explains what data we collect from users of the platform ("Customers", "Users") and how we handle it.
Data we collect
Account data (name, email, organisation, role) provided at signup or invited by an ORG_ADMIN. Platform data (projects, tasks, risks, financials, documents) entered by your organisation into the product. Integration data (issue keys, statuses, sprint data) synced from connected third-party tools such as Jira, limited to the OAuth scopes your organisation authorises. Usage data (login times, feature usage) for security and product improvement. Payment data is processed directly by Razorpay; we do not store card numbers.
How we use it
To provide and operate the platform, enforce your organisation's access permissions, sync with integrations you connect, send transactional email (via Resend), process payments (via Razorpay), and improve the product.
Data residency and processors
Platform data is hosted on Supabase infrastructure in the Mumbai (ap-south-1) region. Sub-processors: Supabase (database/storage), Vercel (application hosting), Resend (transactional email), Razorpay (payments), and, where you enable it, Atlassian Jira (issue sync, under your organisation's own authorisation).
Data sharing
We do not sell personal data. Data is shared only with the sub-processors above, as needed to run the service, and with third parties you explicitly connect (e.g. Jira, under your own OAuth consent).
Retention
We retain account and platform data for as long as your organisation's subscription is active, and for 90 days after termination, unless a longer period is required by law.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. Requests can be made by your organisation's ORG_ADMIN or by contacting us at privacy@governxt.com.
Security
We use encryption in transit and at rest, role-based access control, and row-level security on all platform data.
Cookies
The platform uses essential cookies only, for authentication and session management. No analytics or marketing cookies are in use.
Children's privacy
GovernXT is a business product not directed at children and is not knowingly used by anyone under 18.
International transfers
Platform data is hosted in India. If you access the platform from outside India, your data will be transferred to and processed in India.
Changes to this policy
We will update the effective date above when this policy changes and notify ORG_ADMINs of material changes.
Contact
privacy@governxt.com