Privacy Policy

1. Introduction

Progress ("we," "us," or "our") is a unified activity stream for product teams, operated by Devela Enterprises LLC. We aggregate events from tools like Linear, GitHub, Slack, Asana, Notion, and Figma to give teams clear visibility into project changes, priorities, and blockers.

This Privacy Policy explains how we collect, use, store, and protect your information when you use our service at seeprogress.ai. By using Progress, you agree to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, billing is handled by Stripe — we do not store your credit card details.

Organization Data

Progress is organized around teams ("organizations"). We store organization names, membership, and configuration settings including integration preferences and schedule configurations.

Integration Data

When you connect third-party tools (Linear, GitHub, Slack, Asana, Notion, Figma), we receive activity events via webhooks and OAuth. This includes issue updates, pull requests, messages, tasks, design updates, and similar activity data, along with profile information about the people involved, including names and email addresses, which we use to match the same person's activity across connected tools.

Most integrations are read-only. For Slack, Progress also performs limited write actions that you direct: posting answers when you ask it a question, replying in conversations it has been added to, adding acknowledgment reactions, sending alerts you have configured, joining public channels you select, and showing previews for Progress links. Progress does not create, delete, or alter your existing content in connected tools.

User-Submitted Content

You may submit meeting notes, daily thoughts, and questions through the application. This content is stored and processed to provide summaries and insights.

Usage Data

We collect standard server logs including IP addresses, browser type, and pages visited to maintain and improve the service.

3. How We Use Your Information

We use the information we collect to:

• Generate AI-powered executive summaries, flow status updates, change pressure assessments, momentum tracking, and team sentiment analysis
• Group related activities into work streams across platforms
• Answer natural-language questions about your team's activity
• Parse meeting notes to extract action items, decisions, and discussion topics
• Match identities across connected tools so activity is attributed to the right person
• Send notifications and alerts based on your preferences
• Process billing and manage your subscription
• Maintain, improve, and secure the service

Team sentiment analysis ("The Vibe") is provided only at an aggregate, team level. It is derived from team activity signals and is not used to score, rank, rate, or monitor individual people.

4. AI Processing and Third-Party AI Providers

Progress uses third-party AI providers to process data and generate outputs:

• Embeddings (numerical representations used for search and retrieval) are generated using OpenAI and Voyage AI.
• Summaries, insights, and other generated outputs are produced using OpenAI and Anthropic.

We send data to these providers under data-retention controls that minimize how long they retain it. We do not use customer data to train large language models, and the providers we use do not train their models on data submitted through their APIs under the terms governing our use.

Because these outputs are generated by large language models, they may occasionally be inaccurate or incomplete. Progress is intended to support, not replace, your own judgment, and outputs should be verified before being relied upon for important decisions.

5. Other Third-Party Services

• Stripe — Payment processing is handled by Stripe. We do not store your payment card details. See Stripe's Privacy Policy.
• Integration Platforms — When you connect Linear, GitHub, Slack, Asana, Notion, or Figma, we exchange data with those platforms according to their respective privacy policies and the permissions you grant.

6. Slack Data

When you connect Slack, Progress ingests activity from the channels, private channels, and group direct messages that Progress has been added to, in order to generate summaries and other outputs and to answer questions you ask from Slack. Access is limited to conversations Progress is a member of; Progress cannot see channels or conversations it has not been added to.

One-to-one direct messages between a user and Progress are used only to respond to that user — for example, answering a question or delivering an alert — and are not ingested into team summaries or the activity feed.

Slack-derived data is stored and retained as described in our Data Retention Policy. You can disconnect Slack at any time to stop further collection, after which previously ingested Slack data is deleted as described in that policy. Progress does not retain Slack message or file data in a way that exceeds Slack's own retention limits, including the 90-day history limit on Slack's free tier.

7. Data Storage & Security

We take security seriously:

• OAuth tokens and webhook signing secrets are encrypted at rest
• All incoming webhook events are cryptographically verified using signing secrets before processing
• Data is transmitted over HTTPS using TLS encryption (TLS 1.2 or greater)
• Access to production systems is restricted to authorized personnel

8. Bring Your Own Key (BYOK)

Signal-tier subscribers have the option to provide their own AI API keys ("Bring Your Own Key" or BYOK). When BYOK is enabled:

• AI requests (summaries, analysis, embeddings) are made using your own API key rather than ours
• Your activity data is sent directly from our servers to the AI provider under your account, meaning we never see the AI provider's response data in our logs
• Your API key is encrypted at rest and is never shared with any third party
• You maintain full control over your AI provider relationship, including data retention settings on your own account

BYOK is designed for teams with strict data confidentiality requirements who want maximum control over how their data is processed by AI providers.

9. Data Retention

We retain different categories of data for different periods, described in detail in our Data Retention Policy. In summary:

• Raw activity content is retained for the length of your plan's active context window (21, 60, or 90 days by tier) and never beyond 90 days, after which it is purged.
• Derived data (summaries, insights, embeddings, work streams) is retained while your account is active.
• When you disconnect an integration, data from that source is deleted within 30 days.
• When you delete your account, your personal and organization data is deleted within 30 days, except where we are required by law to retain it.

10. Your Rights

You have the right to:

• Access your personal data that we hold
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your data in a portable format
• Disconnect any integration at any time, stopping further data collection from that source

To exercise any of these rights, contact us at the email below.

11. Cookies

Progress uses only essential cookies required for the service to function, including session management and CSRF protection. We do not use advertising or tracking cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the service. Your continued use of Progress after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

[email protected]

Devela Enterprises LLC