Privacy Policy
Prodigy Pro stores the workspace content you create (ventures, tasks, contacts, ideas, documents, and related records) so that it is available to you and the members of your workspace. This policy explains what we collect and how it is handled.
What we store
- Your account identity (email and profile name) used to sign in.
- Workspace content you create within Prodigy Pro.
- Connection references for third-party integrations you choose to connect (for example, which Slack workspace or Google account is linked). We do not store provider passwords.
- Transactional email you choose to send, and reminder/automation configuration.
Where data lives
Your data is stored in Supabase (a hosted Postgres database) under a per-workspace isolation model. Access is protected by row-level security so that workspace members only see content they are authorized to view.
Third-party services
- Integrations (Google Drive, Google Calendar, Slack, Notion, Dropbox) are connected through Nango OAuth. We store only the connection reference and non-secret metadata; OAuth tokens are held by Nango/Google per their policies.
- Email is delivered through Resend using a Prodigy-owned sending address.
- AI assistance sends content you explicitly query to AI model providers (OpenRouter and/or DeepSeek) to produce responses. We do not use your content to train models.
- Hosting & database are provided by Supabase and Vercel, which process data under their own privacy terms.
Cookies & local storage
Prodigy Pro does not use advertising or analytics cookies. We use browser local storage to keep you signed in, remember your language and appearance preferences, and recognize the device you signed in from (for security alerts). No data is sold or shared for advertising.
Your rights
- Access — you can export a full copy of your workspace data from Settings.
- Correction — you can edit or delete records you created at any time.
- Deletion — you can delete your account, which removes your workspace data.
- Portability — you can download your data in a machine-readable format.
- Withdraw consent — you can disconnect any integration or opt out of product analytics from Settings.
Depending on your location, you may have additional rights under laws such as the GDPR (EU/UK) or CCPA/CPRA (California). To exercise any of these rights, contact support using the email address on your account.
Your control
- You can disconnect any integration from Settings, which removes the connection and any stored token reference.
- You can delete records you created; deleting a record removes it from the workspace.
- You can request removal of your account by contacting support at the email address used to sign up.