Privacy

Account. Your name, email, avatar and sign-in identifier. Never your password.

Workspace. Organization name, allowed email domains, teams, membership and roles.

OKRs. Objectives, key results, check-in scores and notes, grades and retro notes. This is usually your company's strategy.

Share links. The link, who made it, its access rule, and view records, including the email of anyone who unlocks an email-restricted link, since that is how the restriction works.

Billing. Plan and subscription status. Card details never reach us; they stay with our payment processor.

Reminders. If you turn them on, the push subscription your browser issues.

Agents. If you connect one, the connection and an audit trail of what it did.

We use outside processors for sign-in, hosting, the database, payments, and analytics, error reporting and support. Each is bound to handle your data only on our instructions. Reminders are delivered by your browser's own push service.

These marketing pages measure which pages are read, what is clicked, and where visitors arrived from. They hold no OKR data and reading them creates no profile of you. A person record begins only if you identify yourself, which here means opening a support conversation.

Inside the product, session recordings mask all text, not just form fields. There the confidential material is what is on screen. Share link addresses are stripped before sending, because a share token is itself a key.

If you start a support conversation, we keep what you write, the email address you give us, and the page you were on. Conversations started from inside the product are attached to your account; conversations started here are not attached to anyone unless you tell us who you are.

A share link session goes when it expires. Rate limit records last a day, processed billing events 30 days, share link view records six months, the agent audit trail a year.

Share link views are kept for six months rather than for the life of the workspace because the person who unlocked one is usually not our customer, has no account with us, and has no way to ask us to forget them. The view count on the link itself remains.

Everything else, your OKRs included, is kept while the workspace exists. Deleted data can linger briefly in backups.

Turn reminders off where you turned them on. Revoke a share link or an agent connection any time. An admin can remove a member.

Ask us for a copy of your data, a correction, or its deletion, and we will answer within 30 days. If your employer owns the workspace, requests about its OKR data go to them.

We do not sell personal information and we do not train models on it. You can complain to your data protection authority.

my.okrs is operated by Bijou Labs LLC, the controller of the data described here. Privacy requests, and anything else, go to support@okrs.sh.