Legal

Privacy policy

Last updated 1 September 2026. Written in plain English on purpose.

What we collect

Account details you give us: name, email address and company. Workspace content you create: items, comments, attachments and the people you invite. Usage data our servers record: pages visited, features used, browser and device type, and IP address.

We do not buy data about you from third parties, and we do not track you across other websites.

How we use it

To run the service, to support you, to bill you, to keep the service secure, and to tell you about changes that affect your account. We send product news only if you opt in, and every email has an unsubscribe link that works immediately.

Who we share it with

Sub-processors we need to run the service: hosting, email delivery, payment processing and error monitoring. Each is bound by a data processing agreement, and the current list is available on request. We never sell personal data.

Where it lives

Workspace data is stored in the region you choose on the Business plan, and in the United States on Free and Team. Backups stay in the same region.

Your rights

You can export everything from Settings at any time, correct your details yourself, and delete your account, which removes your personal data within 30 days. Residents of the EU, UK and California have additional rights under local law; email privacy@cairn.example to exercise them.

Cookies

We use a session cookie to keep you signed in and one analytics cookie, first-party, to count visits. There is no advertising tracking of any kind.

Changes

When this policy changes we post the new version here with the date, and email account owners if the change affects how their data is handled.