Privacy Policy

ProMan is a project-management service operated by Cotek FZ LLC, a company registered in Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates. In this policy, “ProMan”, “Cotek”, “we”, “us”, and “our” all mean Cotek FZ LLC. You can reach us at support@cotek.live.

To run ProMan we collect the following categories of data:

• Account information. Your name, email address, hashed password, and the organization you join or create.
• Usage data. Basic product telemetry — which pages you load, which actions you take, rough device and browser info, and IP address — so we can diagnose problems and improve the product.
• Project content. Everything you create inside ProMan: projects, tasks, comments, time entries, attachments, and approvals. This is your data; we store and display it so your team can work with it.
• Payment data. If you subscribe to a paid plan, Stripe (our payment processor) collects your card details. Cotek never sees or stores your full card number — only the last four digits, expiration, and a Stripe customer ID.

We use the data we collect to:

• Operate and maintain the ProMan service.
• Bill you and keep billing records where legally required.
• Send you transactional emails (invitation links, password resets, invoices, product incident notices).
• Improve the product through aggregated, de-identified analysis of usage.
• Prevent abuse and enforce the Acceptable Use Policy.

We do not sell your data. We do not use it to train third-party advertising models. We do not ship tracking pixels from ad networks.

To provide the service, ProMan shares data with a small number of sub-processors. Each has its own privacy policy (linked below) and has contractual obligations to protect your data.

• Stripe — payments and invoicing (stripe.com/privacy).
• Resend — transactional email delivery (resend.com/legal/privacy-policy).
• Vercel — application hosting and CDN (vercel.com/legal/privacy-policy).
• Neon — managed PostgreSQL database (neon.tech/privacy-policy).
• Anthropic — AI features (see section 9). (anthropic.com/legal/privacy).

We will also disclose data when compelled by valid legal process, or when necessary to protect the rights, safety, or property of Cotek, our users, or the public.

ProMan runs on Vercel’s global infrastructure and Neon Postgres, with regions in the European Union and the United States. Your data may be processed in either region depending on request routing. We rely on Standard Contractual Clauses (SCCs) and equivalent safeguards for transfers out of the EU/UAE.

We keep your data for as long as your account is active. When you delete your account, we permanently delete your personal data within 30 days, except where we’re legally required to retain records (for example, invoices retained for tax reasons). Within that 30-day window you can restore the account by contacting support.

Under GDPR (if you’re in the EU/EEA/UK), CCPA (if you’re in California), and applicable UAE data-protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (the “right to be forgotten”).
• Export your data in a portable format.
• Object to processing, or restrict how we process your data.

You can exercise most rights directly in the app: profile edits, one-click data export (CSV, XLSX, PDF), and account deletion. For anything else, email support@cotek.live. We’ll respond within 30 days.

Passwords are hashed with bcrypt at cost factor 12 — we never see or store plaintext. All traffic is served over TLS. Audit logs of sensitive actions are immutable. Our hosting, database, and email providers each provide encryption at rest. We review access controls regularly and follow the principle of least privilege for internal access.

No system is perfectly secure. If you discover a vulnerability, please email support@cotek.live and we’ll respond promptly.

ProMan uses Anthropic’s Claude models to power features like the AI project planner, status summaries, and risk radar. When you use these features, the relevant project content is sent to Anthropic’s API for processing.

Per Anthropic’s privacy policy, API data is not used to train their models. Data is retained only as long as needed to return the response, plus a short operational retention window.

If you don’t want any of your data sent to Anthropic, avoid AI-labelled buttons in the product. Admins can also disable AI features organization-wide in Settings → Organization → AI.

ProMan is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please email us and we will delete it.

We’ll update this policy as the product evolves. For material changes we’ll give you at least 30 days’ notice by email and by an in-app banner before they take effect. Non-material changes (clarifications, typo fixes) may be made without notice; the “Last updated” date at the top of this page will always reflect the most recent revision.

Privacy questions, data requests, or concerns go to support@cotek.live. Postal mail can be addressed to Cotek FZ LLC, RAKEZ, Ras Al Khaimah, United Arab Emirates.