Legal

Privacy Policy

Effective date: February 11, 2026

This policy explains what data is processed when you use Baseline Brief and how that data is handled.

Retention-first, advisory scope

What We Process

Last updated section

We process uploaded schedule exports (XER/XML), optional baseline/previous exports, optional config files, generated pack outputs (PDF/PPTX/ZIP/JSON), account or organization metadata, billing metadata, audit records, request timestamps, file names, and error logs needed for service reliability and support.

How We Use Data

Last updated section

Data is used to authenticate users, parse schedule files, generate requested outputs, enforce quotas and abuse controls, support customers, maintain audit evidence, and operate the service. We do not sell personal data and we do not use customer schedule data for advertising.

AI and Derived Data

Last updated section

When optional AI summaries are enabled, the service sends derived pack metrics rather than raw uploaded schedules. Customer-controlled deployments should review their own AI provider settings, retention, and contractual terms before enabling this feature.

Retention and Deletion

Last updated section

Uploads and generated packs are retained for a configurable period (default 14 days) and then deleted by retention policy. Audit records, billing records, security logs, and backup copies may be retained longer where needed for operations, security, legal, tax, or dispute purposes.

Access, Export, and Correction

Last updated section

Requests to access, export, correct, or delete account and organization data should be sent to the operator of your deployed instance. Customer schedule records remain under the customer or deployment operator's control.

Security and Access

Last updated section

Hosted environments should use HTTPS, least-privilege access, identity controls, environment secret management, audit logging, and configured retention. Customers handling sensitive project, commercial, or regulated data should run this software in their own controlled environment or complete a security review before upload.

Your Responsibilities

Last updated section

You are responsible for confirming that your use of this software complies with your contracts, client requirements, privacy obligations, confidentiality duties, export controls, and applicable laws. Do not upload personal, sensitive, confidential, or third-party data you are not authorized to process.

Regional Rights

Last updated section

Privacy rights and notice obligations vary by jurisdiction. California CCPA/CPRA, Canadian PIPEDA, GDPR-like, procurement, and customer-specific requirements should be reviewed before paid production launch or cross-border processing.

Compatibility and Trademarks

Last updated section

This product may process exports compatible with Oracle Primavera P6 formats. Oracle and Primavera are trademarks of Oracle and/or its affiliates. This product is not affiliated with or endorsed by Oracle.

Contact

Privacy requests and escalation details

For privacy questions, contact the operator of your deployed instance and include your organization name, environment, and request details.