Privacy Policy

RedminePRO is operated by HAZERCLOUD INFOTECH LLP, 3rd Floor, SM Tower, Taliparamba, Kerala 670141, India ("HAZERCLOUD", "we", "us"). This policy covers the redminepro.com website, the billing.redminepro.com customer portal, and the RedminePRO hosted workspaces we operate for customers.

Privacy questions and requests: privacy@redminepro.com.

The short version

We collect what we need to run the service and nothing more. Your workspace data belongs to you, lives in the region you chose, and our staff do not access it unless you ask for support. We do not sell personal data. We use a small set of infrastructure providers to run the service, listed below.

What we collect

When you visit redminepro.com. If you submit the contact or migration form, we collect the details you enter (name, email, company, message). The forms are protected by Cloudflare Turnstile, which processes technical signals from your browser to distinguish humans from bots. If you request a demo, we collect your name and email to send your demo access and follow-up emails (each has an unsubscribe link); that form is protected by Google reCAPTCHA. If you arrived from a Google Ads advertisement, Google's tag stores an advertising cookie (_gcl) so we can attribute signups to the ad click. We run error monitoring (Sentry) that records technical error details; it is configured not to capture form contents or request bodies. Your theme choice (light or dark) is stored in your browser and never sent to us.

When you create an account. Name, email address, company details, chosen plan and region, and billing information. Card details are processed by our payment processor and never touch our servers.

Your workspace data. Projects, issues, wikis, files, and user accounts inside your Redmine workspace are yours. We process them solely to provide the service, on your instructions. Our staff access a customer workspace only when you request support, and access is limited to what the request requires.

If you sign in with Google or Microsoft. We receive your name, email address, and account identifier from the provider to create and link your workspace login. We receive no contacts, files, or other account content.

If you book a call. The /meeting page embeds Calendly; details you enter there are processed by Calendly under their privacy policy.

If you use live chat. The website carries a Tawk.to chat widget. Anything you type into it, along with the technical data the widget collects to route and continue the conversation, is processed by Tawk.to under their privacy policy. Please do not put passwords or other secrets into a chat window.

Where your data lives

You choose your workspace region at signup: the United States, Ireland, France or India. Your workspace data resides in that region. Website and billing data may be processed in any of our operating regions.

How we use personal data

To provide and operate the service; to respond to inquiries and support requests; to bill subscriptions; to send service communications (renewal, maintenance, security notices); to measure whether our advertising works (ad-click attribution only); and to meet legal obligations. We do not sell personal data and we do not use your workspace content for advertising, profiling, or training.

AI features (Zaira)

Zaira is optional and off until an administrator configures it. It runs on an AI provider account that you supply, not on ours.

Where content goes. When someone uses Zaira, the relevant issue text is sent to the AI provider your administrator configured, using your own credentials. Five providers are supported: OpenAI, Anthropic, Google Gemini, Bedrock, and any OpenAI-compatible endpoint you nominate. On Bedrock the inference runs in your own account and in the region you choose. RedminePRO and HAZERCLOUD do not receive that content.

What is sent. The subject, description and comments of the issue in question, limited to what the requesting user can already see. For project questions, the retrieved passages, scoped the same way. Attachments are never sent. Private notes are sent only if an administrator enables them and the requesting user may read them. Custom fields are sent only if an administrator allowlists them by name. Nothing is sent from a project that has not enabled the feature.

Redaction. Email addresses, phone numbers and any patterns your administrator configures are replaced with placeholders before content leaves the workspace. The mapping back to the original values exists only for the duration of that request and is not stored.

What we record. One row per call, holding the user, the time, the feature, the project or issue, the provider, the model, token counts, duration, the number of redactions applied and whether the call succeeded. The content of the prompt and the response is not stored, and the table has no column that could hold it.

Consent. Each user agrees once before their first use and is shown the name of the provider that will receive the content. Consent can be withdrawn at any time from My account, which disables the feature for that user.

Subprocessors. The AI provider you configure is your processor, not ours. It is not listed in the table below, because we do not engage it and we do not send it your content.

Service providers (subprocessors)

We will update this list when providers change. Enterprise customers may request notice of subprocessor changes as part of their DPA.

Cookies

We keep cookies minimal. On the marketing site that means the Google Ads attribution cookie described above and the cookies the live-chat widget sets to keep a conversation attached to you between page loads. The billing portal and your workspace set the cookies required to keep you signed in. We do not use third-party analytics cookies on the marketing site.

Retention and deletion

Workspace data is retained for the life of your subscription. When a subscription ends, you may request a full export (your files and database). Workspace data, including backups, is deleted within 90 days of termination unless the law requires longer retention. Billing records are kept as required by Indian tax law. Form submissions and support correspondence are kept as long as needed to handle the matter and for our records.

Your rights

You can request access to, correction of, export of, or deletion of your personal data by writing to privacy@redminepro.com. We respond within 30 days.

For EU/EEA and UK individuals (GDPR): you additionally have the rights to restrict or object to processing and to data portability, and the right to lodge a complaint with your supervisory authority. Where we process workspace data on behalf of a business customer, that customer is the data controller and we act as processor, a standard Data Processing Agreement is available on request for business customers on any plan; Enterprise customers may negotiate a custom DPA.

For India (DPDP Act): you have corresponding rights of access, correction, and erasure under the Digital Personal Data Protection Act, 2023.

Security

Data is encrypted in transit and at rest, backups are encrypted, and access to production systems is restricted and logged.

Children

The service is for business use and not directed at children under 16. We do not knowingly collect their data.

Changes

We will post changes here and update the date above. Material changes are announced to account holders by email or an in-portal notice before they take effect.

Contact

HAZERCLOUD INFOTECH LLP · 3rd Floor, SM Tower, Taliparamba, Kerala 670141, India · privacy@redminepro.com