Data Handling
How we handle your schedule file and any data attached to it. Short version: your file is deleted the moment we have a score. We keep your scores. We never keep your schedule.
Your file is deleted after scoring
When you upload a schedule file, it is sent to our analysis engine, parsed in memory, checked against the 17 structural rules, and then immediately deleted. The file does not persist to any database or storage layer. The deletion happens before the score is returned to your browser, and your file is never sent back in any response.
What the stored report contains, and how it is protected
A useful report has to name names: for a finding to be fixable it must identify the flagged task, so the full report lists each one with its name, duration, and float. For as long as your report is retained, that report content is stored. It is encrypted at rest with AES-256-GCM, and the encryption key is held by our web server, never by the database, so the database alone cannot reveal a single task name. When the retention window ends, the report is permanently deleted. The schedule file itself is never stored at any point, and report content is never indexed, shared, or used for anything except showing you your own report.
How long reports are retained
Free results are kept for 24 hours, paid single reports for 30 days, and Annual subscribers' reports for as long as the subscription is active. If you use an account, we also keep a score history: file name (encrypted at rest), score, verdict, and each check's pass or fail status, to power your account page and score trends. The history never includes task data. You can download it as CSV or delete it at any time from your account page.
Your file is never used for AI training
The AI narrative in paid reports is generated from the aggregate check results, not from your schedule content. No schedule file or task-level data is sent to an AI model at any point in the process. If that changes, we will update this page and notify paying customers before the change takes effect.
Your email is not attached to your file
Your email is used for exactly three things: your Stripe receipt, delivering your report link, and (with your consent) occasional product updates you can unsubscribe from anytime. The report's contents are never emailed, and your email is never linked to any content from your file. We do not sell or share your email with third parties.
Anonymized aggregate metrics only
We collect anonymized, aggregate usage statistics: things like score distribution, which checks fail most often across all users, and how long scoring takes. These numbers help us improve the engine. There is no way to trace an aggregate metric back to a specific file or user.
Infrastructure
The analysis engine runs on Google Cloud Run in the United States. Files in transit are encrypted via TLS. No file data touches any region outside the US. Vercel (our web hosting provider) serves the site globally via CDN.
Questions or concerns? Email us at support@ganttscore.com. We will respond within one business day.