Security and your data

A short answer to the questions a project controls team or an IT reviewer asks before loading schedules. The Privacy Policy and the Terms of Use are the binding texts; this page summarises them.

Where your schedules are kept

• Files, accounts and settings: Supabase, in its Sydney (Australia) region.
• The website and its calculations: Vercel, with the server functions in the Sydney region.
• Your files sit in a private store, separated per space; pages read them on the server and send your browser only the results it shows.

Who can see them

• Only the people you invite to your space, with the role you give them: owner, planner or viewer. Viewers can read, not change.
• Your schedules are never shown to other customers, sold, or used to train AI models.
• The GanttMind owners can reach a space only for support, security and plan administration.
• An owner or planner can make a read-only link to one project's executive report for someone without an account (for example a client). Whoever holds the link can read that report, and nothing else, until it expires (7, 30 or 90 days) or is removed on the Report page. Links are random, never listed by search engines, and stop working if the space is paused.
• The public demo uses invented projects only; no customer schedule is ever used as demo, help or example content.

Signing in

• No passwords: a one-time code is emailed to you each time you sign in.
• Every connection to the site is encrypted (HTTPS).
• Every page and request checks who you are and which space and role you have before it reads anything.

The AI

• The AI is optional. Every number on every page comes from the calculation engine; the AI only writes words and reads your text.
• When someone in your space uses an AI feature, only the text needed for that answer (for example figures from your schedule or the question typed) is sent to Anthropic, which may process it outside Australia. It is used to give the answer, not to train its models.
• What the AI learns from your edits stays inside your own space. An owner can switch AI off for the space.

Keeping and deleting

• Owners and planners can delete any file in the space at any time (Files).
• A space owner can ask us to delete the whole space and its files; email hello@ganttmind.com.
• Visitor records of the website and demo (a random browser number, pages and time) are kept for about a year.

Reporting a problem

If you think you have found a security problem, email hello@ganttmind.com. If a breach is likely to cause you serious harm we will tell you and, where required, the Office of the Australian Information Commissioner.