Privacy policy

The short version

Auto PM stores only what you put into it, keeps it private to your account, and never sells or shares your data with advertisers. You can delete a project — and everything beneath it — at any time.

What we store

• Your account. Your name and email address, provided by Google when you sign in. We do not receive or store your Google password.
• Your work. Projects, PRDs, backlog items, evidence, insights, opportunities, documents, questions and results that you create or upload.
• Connection details you choose to save. Database hosts, usernames and passwords, and Jira API tokens. Passwords and tokens are encrypted before they are stored (AES-256-GCM) and are only ever used to make the connection you asked for.
• Reviewer feedback. When someone comments on a shared PRD link, we store the name they type and their note.

How your data is used

• To run the app: saving, loading, searching and editing your work.
• To draft text on your request. When you press a drafting button, the relevant parts of your project are sent to an AI model through our hosting platform's AI gateway, and the result is written back to your project. Prompts are not used to train models.
• To sync with Jira — only when you connect it and only when you push, or when an issue arrives through the sync hook you installed.

We never connect to your database except to run the read-only queries you configure. See How your data is handled for the full detail.

Who can see your data

Your projects are private to your account. Every row in the database is locked to the person who created it — other users cannot read, change or delete your work, and you cannot see theirs. The only exception is a PRD you deliberately share through a read-only link, which shows that PRD's text to anyone holding the link until you turn it off.

Where it is stored

Data lives in the managed database and hosting provided by our platform provider (Lovable Cloud). Access is encrypted in transit (HTTPS) and database credentials you save are additionally encrypted at rest.

Deleting your data

Deleting a project removes everything beneath it: PRD and its history, epics, stories, evidence, insights, opportunities, documents, saved questions, results, feedback and connection details. To delete your account entirely, contact us and we will remove it and all associated data.

What we don't do

• No advertising, tracking pixels or data resale.
• No access to your production databases beyond read-only queries you set up.
• No use of your content to train AI models.

Questions

This is a young product and we answer questions directly — reach out through the project page where you found Auto PM.