Privacy policy

Three kinds of people touch Petĩra, and we treat them differently:

• Workspace owners and admins. You created an account and run a board. For your account data, we are the controller.
• People who use a board. You posted an idea, voted or commented on someone's board. The board's owner is the controller for what you posted; we process it on their behalf. Their own privacy policy applies too.
• Visitors. You read a page on petira.io or a public board. We keep almost nothing about you.

For an account: your email address, your name if Google gives us one, the workspace name and web address you choose, and the boards, statuses, changelog entries and settings you create. If you pay for a plan we store the plan, the subscription identifier Creem gives us and the dates of the billing period. We never see your card details.

For someone using a board: the ideas, votes and comments they post, the email address they give when they choose to be notified or when the board requires a verified email, a name if they enter one, and, for anonymous votes, a one-way hash of their network address so one person cannot vote twice. When a board is embedded in another product, that product may pass us the user's identifier, email and name so they do not have to sign in again.

For everyone: ordinary server logs (address, page, time, browser) kept for a short time to keep the service running and to stop abuse.

• To run the service you signed up for, which is the contract between us: accounts, boards, votes, statuses, the widget and the emails that close the loop.
• To send you emails you asked for: a sign-in link, a notice that an idea you voted for has shipped, a reply to your comment. Every notification email has an unsubscribe link and a per-board preference.
• To keep the service safe and honest, which is our legitimate interest: rate limits, the duplicate-vote check, the moderation queue and server logs.
• To meet legal obligations, mostly the bookkeeping around paid plans.
• To count visits on the marketing pages with Google Analytics, only with your consent, given through the notice described in section 4 and withdrawable there at any time.

We do not use your data to train anything, to build profiles, or to advertise.

The service itself sets only cookies it needs to work: a session cookie when you sign in, a short-lived cookie that remembers the email you gave when you posted or voted on a board, and, inside the widget, a cookie carrying the identity the host product handed us. None of them are used for analytics or shared with anyone. Boards, the widget and the dashboard carry no analytics at all.

On the marketing pages of petira.io (this site's home, pricing, blog and legal pages) we would like to count visits with Google Analytics, which sets a cookie to tell one visitor's pages from another's. So those pages ask first, once, with a small notice at the bottom of the screen. Until you say yes, Google Analytics is run in its consent mode with analytics storage denied: it sets no cookies and reads none. If you say yes, it sets its own cookies for up to two years and sends Google the page, the referrer and the browser type. Either way we do not switch on advertising features, and your answer is kept for a year in a cookie of its own. You can change it here at any time:

We do not sell or rent data. The following companies process data on our behalf so the service can run:

Beyond these, we disclose data only if the law requires it, and we will tell you when we are allowed to.

The application and the database run on servers in the European Union. Email is delivered from Amazon's Stockholm region. Sign in with Google and the DNS provider are global services; where a transfer outside the EU happens, it is covered by the standard contractual clauses or an adequacy decision.

• Account and board data: for as long as the workspace exists. Deleting the workspace from Settings removes the boards, every idea, vote and comment on them, and your account, at once.
• A board user's data: for as long as the board keeps it. The board owner can delete any idea or comment, and you can ask them or us to.
• Billing records: as long as accounting law requires, held by Creem as the merchant of record.
• Server logs and email delivery logs: a few weeks.
• Google Analytics, if you allowed it: its cookies last up to two years in your browser, and withdrawing consent in section 4 removes them; Google keeps the raw events for us for 14 months.
• Backups: overwritten on a rolling basis within 30 days of a deletion.

Under the GDPR you can ask to see the data we hold about you, correct it, have it deleted, receive a copy of it, or object to how we use it. Workspace owners can do most of this themselves: the export in Settings gives you everything on your boards as JSON and CSV, and Delete workspace does what it says. For anything else, or if you used someone's board and want your posts removed, email [email protected]. We answer without asking for more than we need to be sure it is you. Where we rely on your consent, as for analytics, you can withdraw it at any time, and the withdrawal does not affect what happened before.

If you think we have handled your data badly you can complain to the State Data Protection Inspectorate of Lithuania (VDAI) or to the authority in your own country. We would rather hear from you first.

For the content your users post, you are the controller and we process it under your instructions and the data processing agreement, which applies on every plan, including Free; the list of sub-processors above is part of it, and we will email workspace owners before adding to it. Tell your users, in your own privacy policy, that feedback is collected through Petĩra.

Everything travels over HTTPS. There are no passwords to leak: sign-in is by Google or by a single-use link. Widget identities are signed by the host product, and votes from people who are not signed in are recorded against a hash, never a raw address. Access to production systems is limited to the people who run the service. If a breach ever affects you, we will tell you and the authority without undue delay.

When this policy changes, the date at the top changes with it, and material changes are emailed to workspace owners. Questions about privacy go to [email protected]. Our company details are in the terms of service.