Privacy Policy

← Back to Backlog.fyi

Last updated: August 29, 2026

TL;DR

  • Your data is used only to run the service
  • Your private data is encrypted at rest
  • Your data is not sold
  • You can export or delete your data anytime
  • Third-party services are involved (Telegram, AI providers, etc.)
  • Some logs/backups may be kept for up to 30 days

1. Overview

This Privacy Policy explains how Backlog.fyi collects, uses, and handles your data.

This is a small, non-commercial project. The goal is to collect as little data as possible and use it only to provide the service.

2. Data Collected

The service may collect and store:

  • Account information (e.g., email, identifiers)
  • Tasks, notes, and preferences
  • Calendar data (if you connect a calendar)
  • Messages sent via Telegram or email integrations
  • Basic technical data (e.g., logs, usage, error reports)

3. How Data Is Used

Your data is used only to:

  • Provide and operate the service
  • Enable AI features
  • Sync with connected services (Telegram, email, calendar)
  • Monitor and maintain system health
  • Prevent abuse

4. Data Ownership and Control

You retain full ownership of your data.

You can:

  • Request a full export of your data
  • Delete your account and associated data at any time

After deletion, some data (such as logs and backups) may remain for up to 30 days before being permanently removed.

5. Data Sharing

Your data is not sold.

Your data is not shared with third parties except:

  • When required by law
  • When necessary to operate the service (see section 6)

6. Third-Party Services

The service relies on third-party providers that may process or have access to your data. These include (but are not limited to):

  • Telegram (messaging)
  • AI providers via OpenRouter (AI processing)
  • Email providers (sending emails)
  • Grafana Cloud (logs and metrics)
  • CDNs (static assets like libraries and fonts)

These providers have their own privacy policies and practices.

While reasonable effort is made to choose privacy-respecting providers and configurations, there is no guarantee that they will not store or use data outside of this service’s control.

7. AI Processing

When you use AI features:

  • Your input may be sent to third-party AI providers
  • Responses are generated based on that input

Requests to AI providers are only routed to endpoints with a zero-data-retention policy: the provider doesn't store your input or its response once the request completes.

AI systems may produce incorrect or unexpected outputs.

8. Logs and Monitoring

Basic logs and metrics are collected to operate and improve the service.

This may include:

  • Error logs
  • Usage patterns
  • Performance data

Logs are retained for up to 30 days.

9. Security

Reasonable effort is made to protect your data.

Sensitive user content — such as task titles, descriptions, notes, and integration messages — is encrypted at rest.

However, no system is completely secure, and no guarantees are made regarding absolute security.

10. Data Retention

  • Active account data is stored as long as your account exists
  • Logs and backups may be retained for up to 30 days

11. Children’s Privacy

The service is not intended for users under the age of 16 (or the minimum age required in your country).

12. Changes to This Policy

This policy may change at any time.

Continued use of the service means you accept the updated policy.

13. Contact

For any questions, data requests, or deletion requests, contact the project owner, Itay Polack-Gadassi, at hello@backlog.fyi. To report abuse, contact abuse@backlog.fyi.