Privacy Policy

1. Who we are

SPM (Software Project Management) is an internal work-management application operated by Vrixaa Labs ("we", "us"). It is used by our team members to manage projects, tasks, work reports, attendance and related workplace activity. Accounts are created and managed by company administrators for team members; the app is not offered to the general public.

2. Information we collect

• Account details: your name, work email address, role and skills profile.
• Work content: projects, tasks, task comments, daily and weekly work reports, holiday/leave requests, and documents or links you upload.
• Usage records: actions you take in the app (such as task status changes) are logged for accountability and audit purposes.
• Technical data: session tokens needed to keep you signed in. We do not collect precise location, contacts, or advertising identifiers.

3. How we use information

• To operate the service: assigning and tracking work, reviewing reports, and managing projects.
• To keep the service secure: authentication, session management and audit logging.
• For internal workplace administration, such as workload and attendance overviews visible to administrators and supervisors.

We do not sell personal information, use it for advertising, or share it with third parties except service providers that host our infrastructure (e.g. server and database hosting), who process it only on our instructions.

4. Data visibility inside the company

Because SPM is a workplace tool, information you enter (tasks, reports, documents, profile skills) is visible to administrators and, where relevant, supervisors and project members, in line with normal workplace management.

5. Data retention & deletion

We keep your data while your account is active. When you leave the company or request account deletion, your account is deactivated and personal data is deleted, except for records we are required or legitimately need to retain as employment and business records (for example, audit logs and historical project records). Deletion requests are processed within 30 days. See our account deletion page for how to make a request.

6. Security

Data is encrypted in transit (HTTPS). Passwords are stored as salted hashes. Access to production systems is restricted to authorized personnel.

7. Contact

For any privacy questions or requests, contact us at vrixaalabs@gmail.com.