Privacy Policy

1. Introduction

GatePhase (“GatePhase”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use:

• The GatePhase website

• The GatePhase web application

• Any related services, integrations, or communications

GatePhase is a project governance platform designed to enforce lifecycle controls, approvals, risk oversight, and financial validation across project environments.

If you have any questions regarding this policy, please contact:
info@gatephase.com

2. Data Controller

GatePhase Ltd (or your registered legal entity name) is the data controller for personal data processed in connection with the GatePhase platform.

Registered Address: [Insert address]
Company Number: [Insert number]
Email: info@gatephase.com

3. Information We Collect

3.1 Information You Provide

We may collect:

• Name

• Email address

• Company name

• Job title

• Billing information

• Account credentials

• Governance configuration data

• Project metadata uploaded to the platform

We do not intentionally collect sensitive personal data unless voluntarily provided.

3.2 Usage Data

We automatically collect:

• IP address

• Browser type

• Device information

• Log data

• Session data

• Feature usage metrics

This is used to maintain security, improve performance, and analyze product usage.

3.3 Integration Data

If you connect third-party tools (e.g., Microsoft Project, Planner, Jira):

We may access and process:

• Project structure data

• Task metadata

• Milestone data

• Schedule information

• Assigned user identifiers

• Cost or financial summary fields

GatePhase only accesses data necessary to provide governance functionality.

We do not access unrelated third-party data.

4. How We Use Your Data

We process personal data to:

• Provide and maintain the GatePhase platform

• Enforce governance workflows and lifecycle controls

• Authenticate users

• Process payments

• Provide customer support

• Improve platform performance

• Ensure security and prevent fraud

• Comply with legal obligations

We do not sell personal data.

5. Legal Basis for Processing (GDPR)

Where applicable under GDPR, we rely on:

• Contractual necessity (to provide the service)

• Legitimate interests (platform improvement and security)

• Legal obligations

• Consent (for marketing communications)

6. Data Sharing

We may share data with:

• Payment processors (e.g., Stripe)

• Cloud infrastructure providers

• Authentication providers

• Analytics providers

• Legal authorities where required by law

All service providers are bound by contractual data protection obligations.

We do not sell or trade personal data.

7. Data Retention

We retain personal data:

• For the duration of the account relationship

• As required for legal, financial, or compliance purposes

• For a reasonable period following account termination

You may request deletion of your data, subject to legal requirements.

8. Security

We implement appropriate technical and organizational safeguards, including:

• Encrypted data transmission (HTTPS/TLS)

• Role-based access controls

• Secure authentication

• Activity logging

• Infrastructure-level security controls

While we take reasonable measures, no system is completely secure.

9. International Transfers

If data is transferred outside your jurisdiction, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions

• Contractual protections

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent

To exercise your rights, contact: info@gatephase.com

11. Cookies & Tracking

GatePhase may use cookies and similar technologies to:

• Maintain session state

• Authenticate users

• Improve user experience

• Analyze usage patterns

You may manage cookies via your browser settings.

12. Children’s Privacy

GatePhase is not intended for individuals under the age of 16.
We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy periodically.

Material changes will be communicated via:

• Platform notification

• Email (where applicable)

Continued use of GatePhase constitutes acceptance of the revised policy.

14. Contact Information

For privacy inquiries:

GatePhase Ltd
Email: info@gatephase.com
Address: [Insert Address]

15. Enterprise Data Processing

Where GatePhase processes personal data on behalf of enterprise customers, such processing is governed by separate Data Processing Agreements (DPAs).

GatePhase acts as a data processor where applicable and follows customer instructions in accordance with applicable data protection laws.