This policy explains what personal data Missions (“we”, “us”) collects when you use this website and the Missions app, why we collect it and what choices you have. If anything here is unclear, write to hello@missionnops.com.

Who is responsible

For this website and for accounts we manage directly, the company that operates Missions is responsible for your data. When a company uses Missions for its team, that company decides who is invited and what is stored in its workspace; we process that content on its behalf.

What we collect

Account details: your name, email address, password (stored only as a secure hash), profile picture and role.
Workspace content: projects, missions, objectives, comments, sticky notes, custom field values and files that you or your team add.
Usage and security data: sign-in times, the devices and browsers you are signed in on, IP addresses and an audit log of important account changes.
Notification settings: your choices per notification type, and a browser push subscription if you turn push on.
Messages to us: anything you send us by email, including the details you fill in on our contact form.

How we use it

To run the service: sign you in, show your work, send the notifications and emails you asked for, and keep your workspace in your brand.
To keep it secure: detect misuse, protect accounts and investigate problems.
To support you and your company, and to reply when you contact us.
To meet legal obligations.

We do not sell personal data and we do not use your workspace content for advertising.

Cookies and local storage

The app uses one essential cookie to keep you signed in. Your browser’s local storage remembers preferences such as your theme and the last workspace you opened. This website does not use advertising or analytics cookies. Website fonts are loaded from Google Fonts, which receives your IP address when the page loads.

Who we share it with

We use a small number of service providers to run Missions, and only share what they need:

Render, to host the app and its database.
Cloudflare R2, to store uploaded files, exports and backups.
Loops, to send account and notification emails.
Your browser’s push service (for example Google, Apple or Mozilla), if you turn on push notifications.

These providers may process data outside your country. We may also disclose data when the law requires it.

How long we keep it

We keep your data while your account or your company’s workspace is active. When you delete your account, or an owner deletes the company, there is a 30-day grace period during which it can be cancelled; after that the data is deleted or anonymised. Read notifications are removed after 90 days. Backups are kept for a limited time and then overwritten.

Your choices and rights

Update your profile and notification settings at any time in the app.
See your active sessions and sign out other devices.
Delete your account from your settings, or ask your company’s owner to remove you.
Ask us for a copy of your data, or to correct or delete it, by writing to hello@missionnops.com. If your data belongs to a company workspace, we may pass your request to that company.

Security

Connections are encrypted, passwords are hashed, every support visit by our team is recorded in the audit log and the database is backed up daily. No system is perfectly secure, so please use a strong, unique password.

Children

Missions is a work tool and is not meant for children.

Changes

We may update this policy. When we make important changes we will update the date above and, where it makes sense, tell you in the app.

Contact

Questions or requests: hello@missionnops.com.