Privacy Policy

Retromate (“we,” “us,” or “our”) operates retromate.co. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using Retromate you agree to the practices described here.

1. Information We Collect

Account data. Name and email address provided at signup.

Team and retro content. Cards, action items, comments, and other content you or your teammates create inside the product.

Usage data. Pages visited, features used, and interaction events collected via server logs and analytics.

Payment data. Billing is handled by Stripe. We store only your subscription status and plan; we never see or store full card numbers.

2. How We Use Your Information

• To operate and improve the service.
• To power the AI agent — retro cards and team history are sent to Anthropic’s Claude API to generate summaries, detect patterns, and prepare context for future sessions.
• To generate vector embeddings (via OpenAI’s embeddings API) stored in our database for semantic search over your team’s retro history.
• To send transactional emails (e.g. confirmations, overdue action item alerts).
• To detect and prevent fraud or abuse.

3. AI Processing

Retro content is processed by third-party AI providers (Anthropic, OpenAI) under their respective data processing agreements. Content sent to these providers is used solely to generate responses for your team and is not used to train their models under our agreements.

We use semantic search over your team’s retro history to surface relevant context to the AI agent. The number of past retros retrieved for any given query — and the method by which they are retrieved — may change at any time as we improve the system. We make no guarantee about which specific past sessions are surfaced or how many.

4. Data Retention and History

We currently offer unlimited retro history on all plans. However, we reserve the right to introduce, change, or enforce data retention limits on any plan at any time, including plans that previously had no such limit. We will provide at least 30 days’ notice by email before applying any new retention limit to existing data.

You may export or delete your team’s data at any time by contacting us at privacy@retromate.co.

5. Data Sharing

We do not sell your data.

6. Security

Card anonymity is enforced at the database level via Row Level Security policies — author identity is never exposed to other participants. All data is encrypted in transit (TLS) and at rest.

7. Your Rights

Depending on your jurisdiction you may have the right to access, correct, or delete personal data we hold about you. To exercise these rights contact privacy@retromate.co.

8. Changes to This Policy

We may update this policy at any time. We will notify you of material changes by email or by posting a notice in the product. Continued use after changes take effect constitutes acceptance.

9. Contact

Questions? Email privacy@retromate.co.