RedminePRO is operated by HAZERCLOUD INFOTECH LLP, 3rd Floor, SM Tower, Taliparamba, Kerala 670141, India ("HAZERCLOUD", "we", "us"). This policy covers the redminepro.com website, the billing.redminepro.com customer portal, and the RedminePRO hosted workspaces we operate for customers.
Privacy questions and requests: privacy@redminepro.com.
The short version
We collect what we need to run the service and nothing more. Your workspace data belongs to you, lives in the region you chose, and our staff do not access it unless you ask for support. We do not sell personal data. We use a small set of infrastructure providers to run the service, listed below.
What we collect
When you visit redminepro.com. If you submit the contact or migration
form, we collect the details you enter (name, email, company, message). The
forms are protected by Cloudflare Turnstile, which processes technical
signals from your browser to distinguish humans from bots. If you request a
demo, we collect your name and email to send your demo access and follow-up
emails (each has an unsubscribe link); that form is protected by Google
reCAPTCHA. If you arrived
from a Google Ads advertisement, Google's tag stores an advertising cookie
(_gcl) so we can attribute signups to the ad click. We run error
monitoring (Sentry) that records technical error details; it is configured
not to capture form contents or request bodies. Your theme choice (light or
dark) is stored in your browser and never sent to us.
When you create an account. Name, email address, company details, chosen plan and region, and billing information. Card details are processed by our payment processor and never touch our servers.
Your workspace data. Projects, issues, wikis, files, and user accounts inside your Redmine workspace are yours. We process them solely to provide the service, on your instructions. Our staff access a customer workspace only when you request support, and access is limited to what the request requires.
If you sign in with Google or Microsoft. We receive your name, email address, and account identifier from the provider to create and link your workspace login. We receive no contacts, files, or other account content.
If you book a call. The /meeting page embeds Calendly; details you enter there are processed by Calendly under their privacy policy.
Where your data lives
You choose your workspace region at signup — United States, European Union, or India — and your workspace data resides in AWS data centers in that region. Website and billing data may be processed in any of our operating regions.
How we use personal data
To provide and operate the service; to respond to inquiries and support requests; to bill subscriptions; to send service communications (renewal, maintenance, security notices); to measure whether our advertising works (ad-click attribution only); and to meet legal obligations. We do not sell personal data and we do not use your workspace content for advertising, profiling, or training.
Service providers (subprocessors)
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting and storage in your chosen region (US, EU, India) |
| Payment processor | Subscription payments; card data handled entirely by them |
| Cloudflare | Turnstile bot protection on website forms |
| Ads click attribution on the website; reCAPTCHA bot protection on the demo-request form; optional "Sign in with Google" | |
| Microsoft | Optional "Sign in with Microsoft" (Entra ID) |
| Sentry | Error monitoring (technical error data, no form contents) |
| Calendly | Meeting scheduling on the /meeting page |
We will update this list when providers change. Enterprise customers may request notice of subprocessor changes as part of their DPA.
Cookies
We keep cookies minimal. The website itself sets no tracking cookies beyond the Google Ads attribution cookie described above. The billing portal and your workspace set the cookies required to keep you signed in. We do not use third-party analytics cookies on the marketing site.
Retention and deletion
Workspace data is retained for the life of your subscription. When a subscription ends, you may request a full export (your files and database). Workspace data, including backups, is deleted within 90 days of termination unless the law requires longer retention. Billing records are kept as required by Indian tax law. Form submissions and support correspondence are kept as long as needed to handle the matter and for our records.
Your rights
You can request access to, correction of, export of, or deletion of your personal data by writing to privacy@redminepro.com. We respond within 30 days.
For EU/EEA and UK individuals (GDPR): you additionally have the rights to restrict or object to processing and to data portability, and the right to lodge a complaint with your supervisory authority. Where we process workspace data on behalf of a business customer, that customer is the data controller and we act as processor — a standard Data Processing Agreement is available on request for business customers on any plan; Enterprise customers may negotiate a custom DPA.
For India (DPDP Act): you have corresponding rights of access, correction, and erasure under the Digital Personal Data Protection Act, 2023.
Security
HAZERCLOUD maintains active ISO/IEC 27001 certification, and RedminePRO runs entirely on AWS data centers certified for SOC 1, SOC 2, PCI-DSS, and ISO/IEC 27001. Data is encrypted in transit and at rest, backups are encrypted, and access to production systems is restricted and logged.
Children
The service is for business use and not directed at children under 16. We do not knowingly collect their data.
Changes
We will post changes here and update the date above. Material changes are announced to account holders by email or an in-portal notice before they take effect.
Contact
HAZERCLOUD INFOTECH LLP · 3rd Floor, SM Tower, Taliparamba, Kerala 670141, India · privacy@redminepro.com