Privacy Policy
Last updated 2026-09-23
This policy covers the Delivery Timeline web app and its companion mobile app (together, "the app"), both operated by EXAB for a fixed set of invited stakeholders — there is no public sign-up, and this policy is written for the people an administrator has already given an account to.
Information we collect
When your account is created, we store your name, email address, job title (a descriptive label such as "CEO" or "Backend", shown to other stakeholders), role, and your language and colour-theme preferences. We record the date you last signed in. If you sign in from the mobile app, we also store a device-specific access token so that app can act on your behalf. We do not ask for your date of birth, your location, your contacts, or any other device data.
Content you work with
While using the app, you and the people you work with may add project names, task descriptions, comments, file attachments, and support tickets to a delivery plan you already have access to. This content belongs to that plan and is visible to the other stakeholders on it, according to their role.
How we use it
We use this information to sign you in, to show your name and role beside the work assigned to you, and to email you about things that affect you: being added to a plan or a group, a change to your role or project access, a task assigned to you or your group, an approaching deadline, a password reset, and app announcements. From the Profile page, some roles can turn off the non-essential categories; password-reset and account-credential emails cannot be turned off, since they are how you get back into your account.
Sharing
We do not sell, rent, or share your information with advertisers. Email is delivered through Resend (resend.com), our transactional email provider, which only ever receives what a given email needs to be sent. We do not use analytics or advertising trackers in the app or on this website.
Retention
Your account and the plans you have access to are kept for as long as your account exists. In-app notifications are removed automatically after 120 days. If you should no longer have access, ask a manager to remove your account; this deletes your personal details, though activity it already recorded (for example, "X moved task Y") keeps your name as plain text in that historical record, the same way a paper record would.
Security
Passwords are stored hashed, never in plain text. A manager can reset a lost password from an admin screen, and you can reset it yourself at any time from the sign-in page without waiting on anyone. Signing in from the mobile app issues a token for that device only, which can be revoked without signing you out of the web app or any other device.
Your choices
You can update your own name and title, change your password, and — where your role allows it — choose which optional email categories you receive, all from the Profile page. For anything else, including correcting information or deleting your account, contact us at the address below.
Children
This app is a workplace tool provisioned through an employer or client relationship. It is not directed at children, and we do not knowingly collect information from anyone under 16.
Changes to this policy
If this policy changes materially, we will update the date at the top of this page.
Contact us
Questions about this policy or your data: email support@exab-web.com.