Last updated: 7 August 2026
This Privacy Policy explains how BluePin Inc ("BluePin", "we", "us", "our"), the company responsible for Dot.Projects, collects, uses, stores, and shares personal information when you use Dot.Projects and the wider Dot Ecosystem it connects to. It is written to align with South Africa's Protection of Personal Information Act 4 of 2013 ("POPIA").
1. Who we are
BluePin Inc is the responsible party for the personal information Dot.Projects processes. Our Information Officer can be reached at privacy@infodot.co.za for any question, request, or concern about your personal information.
2. What we collect
Account information — your name, email address, and password (stored as a salted hash, never in plain text), via your Dot Ecosystem account.
Team information — the team you belong to, since projects, milestones, and tasks are scoped to your team.
Projects and tasks — the projects, milestones, tasks, and comments your team creates, including assignments, due dates, priorities, and status.
AI plan-generation activity — if you use the AI-assisted milestone/task generation feature, we log the prompt (your project name and description) and the response, along with token usage, for a full audit trail. When a live AI provider is configured, this prompt is sent to Anthropic to generate the plan; when it isn't, a deterministic mock plan is generated entirely on our own infrastructure.
Technical information — IP address, browser and device information, and session activity, collected automatically for security and to keep you signed in.
3. Why we process your information
We process personal information to:
- create and maintain your account, and authenticate you when you sign in;
- let you sign in once and move between connected Dot Ecosystem platforms without re-entering your credentials;
- let your team create, assign, and track projects, milestones, and tasks on a shared board; and
- keep Dot.Projects secure and prevent abuse.
4. Ecosystem single sign-on
When you use another Dot Ecosystem platform to sign in to Dot.Projects (or vice versa), a short-lived, single-use authentication token confirms who you are without exposing your password to the connected platform.
5. Who can see your information
Projects, milestones, tasks, and comments are scoped to your team — we don't share your team's data with other teams. Task assignments and comments are visible to your team members, since that's how collaboration on a shared board works.
6. How long we keep your information
We keep your account, team, and project data for as long as your account or team is active. If you delete your account, or your team removes a project, the associated data is removed, except where we're required by law to retain certain records for longer.
7. Security
We apply reasonable technical and organisational measures to protect personal information, including encrypted password storage, team-scoped access control, and single-use SSO tokens for ecosystem sign-in. No system is perfectly secure, and we can't guarantee absolute security.
8. Your rights under POPIA
Subject to applicable law, you have the right to:
- request access to the personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request deletion of your personal information;
- object to our processing of your personal information in certain circumstances; and
- lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, contact privacy@infodot.co.za.
9. Cookies
Dot.Projects uses a session cookie to keep you signed in. See our Cookie Policy for details.
10. Changes to this Policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.
11. Contact us
If you have questions about this Privacy Policy or how we handle your personal information, contact us at privacy@infodot.co.za.