Privacy Policy

Last updated: August 2026

AI Standup (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy describes what data we collect, how we use it, and your rights regarding that data — in accordance with Indonesia's Personal Data Protection Law (UU PDP No. 27/2022) and international best practices.

1. Data We Collect

1.1 Account Information

When you create an account, we collect:

• Full name (display name)
• Email address
• Password (stored as a bcrypt hash — we never store plaintext passwords)
• Profile avatar (optional)
• Timestamp of your consent to this policy

1.2 Standup Content

When you submit a daily standup, we store:

• Your “yesterday” text
• Your “today” text
• Your “blocker” text (optional)
• Submission timestamp and status (submitted, late, missed)

1.3 Usage Data

We automatically collect basic usage information:

• Browser timezone (for workspace timezone detection)
• Login timestamps and IP addresses (for security — rate limiting and abuse prevention)
• WebSocket connection events (for real-time dashboard functionality)

2. How We Use Your Data

We use your personal data solely for the following purposes:

• Providing the Service: Displaying your standups on the workspace dashboard, generating presence status, and managing workspace membership
• AI Summarization: Your standup text is processed by an external AI service (see Section 3) to generate daily summaries, weekly digests, and blocker severity analysis
• Notifications: Sending email reminders, blocker alerts, and summary digests based on your notification preferences
• Security: Rate limiting, abuse prevention, and audit logging of administrative actions within workspaces

3. AI Processing Disclosure

This is important: Your standup content (yesterday, today, and blocker text) is sent to Anthropic's Claude API for AI-powered summarization and blocker detection. Specifically:

• Standup entries are batched per workspace per day and sent as a single API call
• Anthropic processes this data according to their privacy policy
• We do not send your data to any other third-party AI or analytics service
• AI-generated summaries and blocker analyses are stored within your workspace's isolated data boundary

4. Data Isolation & Security

AI Standup is a multi-tenant platform. Every workspace is fully isolated — your team's data (standup entries, summaries, blocker flags, member lists, audit logs) is never visible to or accessible by other workspaces. We enforce this at the database query level, API authorization level, and WebSocket channel level.

5. Data Retention

• Standup entries & AI summaries: Retained permanently in the current version
• Audit logs: Retained for a minimum of 1 year
• In-app notifications: Automatically purged after 30 days
• Expired invite tokens: Soft-deleted after 30 days
• Password reset tokens: Hard-deleted after 1-hour expiry

6. Your Rights

You have the right to:

• Access your personal data through your profile and standup history
• Export your workspace data as CSV (available to Workspace Owners)
• Delete your account and all associated personal data — contact us at privacy@aistandup.com to request full data deletion
• Withdraw consent at any time by deleting your account
• Control notifications — you can mute email reminders per workspace without affecting other members

7. Cookies & Local Storage

We use:

• HttpOnly cookies for refresh token storage (authentication only, not tracking)
• Browser localStorage for auto-saving draft standup text (stays on your device, never sent to our servers unless you submit)

We do not use any third-party tracking cookies, analytics scripts, or advertising cookies.

8. Children's Privacy

AI Standup is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users via email. The “Last updated” date at the top of this page indicates when this policy was last revised.

10. Contact

For privacy-related questions or data deletion requests, contact us at privacy@aistandup.com.