Legal
Privacy Policy
Effective date: February 11, 2026
This policy explains what data is processed when you use Baseline Brief and how that data is handled.
What We Process
Last updated section
We process uploaded schedule exports (XER/XML), optional baseline/previous exports, optional config files, generated pack outputs (PDF/PPTX/ZIP/JSON), account or organization metadata, billing metadata, audit records, request timestamps, file names, and error logs needed for service reliability and support.
How We Use Data
Last updated section
Data is used to authenticate users, parse schedule files, generate requested outputs, enforce quotas and abuse controls, support customers, maintain audit evidence, and operate the service. We do not sell personal data and we do not use customer schedule data for advertising.
AI and Derived Data
Last updated section
When optional AI summaries are enabled, the service sends derived pack metrics rather than raw uploaded schedules. Customer-controlled deployments should review their own AI provider settings, retention, and contractual terms before enabling this feature.
Retention and Deletion
Last updated section
Uploads and generated packs are retained for a configurable period (default 14 days) and then deleted by retention policy. Audit records, billing records, security logs, and backup copies may be retained longer where needed for operations, security, legal, tax, or dispute purposes.
Access, Export, and Correction
Last updated section
Requests to access, export, correct, or delete account and organization data should be sent to the operator of your deployed instance. Customer schedule records remain under the customer or deployment operator's control.
Security and Access
Last updated section
Hosted environments should use HTTPS, least-privilege access, identity controls, environment secret management, audit logging, and configured retention. Customers handling sensitive project, commercial, or regulated data should run this software in their own controlled environment or complete a security review before upload.
Your Responsibilities
Last updated section
You are responsible for confirming that your use of this software complies with your contracts, client requirements, privacy obligations, confidentiality duties, export controls, and applicable laws. Do not upload personal, sensitive, confidential, or third-party data you are not authorized to process.
Regional Rights
Last updated section
Privacy rights and notice obligations vary by jurisdiction. California CCPA/CPRA, Canadian PIPEDA, GDPR-like, procurement, and customer-specific requirements should be reviewed before paid production launch or cross-border processing.
Compatibility and Trademarks
Last updated section
This product may process exports compatible with Oracle Primavera P6 formats. Oracle and Primavera are trademarks of Oracle and/or its affiliates. This product is not affiliated with or endorsed by Oracle.
Contact
Privacy requests and escalation details
For privacy questions, contact the operator of your deployed instance and include your organization name, environment, and request details.