Preview environment — data may be reset without notice. Do not use for real work.

Privacy Policy

Last updated: 2026-06-21

What we collect

  • Account data: email, optional name, and (for password sign-up) a bcrypt hash of your password. We never see the plaintext.
  • Project data: the tasks, dates, comments, attachments, and other content you create.
  • Logs: request metadata (IP address, user agent, timestamps) for security and debugging.

How we use it

To operate the service: render your charts, send notifications you opt into, and protect Madi from abuse. We do not sell or rent your data.

Subprocessors

  • Cloudflare - application hosting, edge network, R2 (file storage), Hyperdrive (database connection pooling).
  • Amazon Web Services (AWS Lightsail) - Postgres database hosting.
  • Resend - transactional email (password resets, notifications).
  • Google - "Sign in with Google" when you choose it.
  • Sentry - error tracking.
  • Paddle - merchant-of-record payment processing for paid subscriptions (billing details, transaction history, invoices). Paddle, not Madi, holds your card details.

International transfers

Madi is operated from the Republic of Korea. The subprocessors above may process data outside Korea (e.g. Cloudflare's global edge, AWS's data-center regions, Paddle's UK/EU infrastructure). Each vendor relies on Standard Contractual Clauses or an equivalent recognized transfer mechanism for cross-border data flows.

Retention

  • Active accounts: kept while your account is active.
  • Deleted accounts: data is removed within 30 days.
  • Demo accounts: automatically pruned after 24 hours.
  • Logs: 90 days, then auto-deleted.

Your rights

You can:

  • Export your project data at any time - CSV / ZIP from each project's menu.
  • Download your account data as a JSON file from your account settings.
  • Delete your account from your account settings. Owned workspaces and their content are removed within 30 days.

For other GDPR / CCPA requests (rectification, restriction, objection), email support@madiplan.app.

Cookies

We use a single first-party session cookie for authentication. No third-party tracking cookies, no advertising trackers.

Changes

We'll announce material changes via email or in-product notice at least 14 days before they take effect.

Contact

Privacy questions? support@madiplan.app