This note explains what personal data Sprint Suite collects when you register your interest or use the apps — Sprintraid, Sprintsignal, Sprintretro, Sprintpoker, Sprintplan, and the central Sprint Suite hub — why we hold it, who processes it, and the rights you have over it. It sits alongside the Free Use Licence.
1. Who is responsible. David Jackson is the data controller for personal data processed through Sprint Suite. Questions, requests, or complaints about your data can be sent to nirvanadesign@msn.com.
2. What we collect.
- When you register your interest: your name, work email, company name, job title, team size, which apps interest you, and any message you send us.
- Your account: your email address, name, the company and team you belong to, and your role within it.
- When you sign in and use the apps: a session record containing your IP address, browser user-agent, and sign-in and activity timestamps; and an audit log of key actions (for example sign-in, launching an app, and administrative changes) with the associated IP address.
- Content you create in the apps: RAID entries, retrospective notes, planning-poker estimates, and Sprintsignal survey responses that you and your team enter.
We do not use advertising trackers, and we do not sell your data or share it for anyone else's marketing. We use analytics only on our public pages, only with your consent, and never for advertising — see section 6.
3. Why we hold it and our lawful basis. We use this data to provide the service you have asked for: to respond to interest requests, to authenticate you by magic link, to run the apps and store the work you create in them, and to keep the service secure and diagnose problems (the session and audit records). Our lawful bases are performance of our arrangement with you and our legitimate interest in operating and securing the service; for interest requests we also rely on your consent in submitting the form.
4. AI processing in Sprintraid. Sprintraid includes an optional extraction feature. When you use it, the text you submit is sent to Anthropic (the provider of the Claude model) to generate RAID entries, and the result is returned to you. This only happens when you actively use that feature. No other app in the suite sends your content to an AI provider.
5. Processors and third parties. We share the minimum data needed with a small number of service providers who process it on our behalf:
- Resend — delivers our transactional emails (magic-link sign-in and interest-request notifications); receives your email address.
- Anthropic — powers the Sprintraid extraction feature described above; receives only the content you submit to that feature. Data sent through Anthropic's API is not used to train its models.
- IONOS — provides the hosting on which the service and its data are stored.
- Google (Google Analytics): counts visits to our public pages, and only if you accept analytics cookies. Google receives your IP address and browser information. It is never used for advertising, and we do not share your account or app content with Google.
6. Cookies. We set a single essential session cookie so you stay signed in. It is not used for tracking or advertising. If you make a choice about analytics on our public pages we also store that choice in an essential cookie (ss_consent) so we do not have to ask you again; it holds nothing but your answer.
On our public pages (the home page, the interest-registration form, and this note) we would like to use Google Analytics to count visits, so we can see which pages are useful. It sets analytics cookies (_ga and _ga_*). These are only set if you accept — until then, and if you decline, your browser does not contact Google at all. They are never used for advertising, and we never sell your data. You can change your mind at any time. There are no advertising cookies anywhere on Sprint Suite.
7. International transfers. Some processors (including Anthropic and Google) are based outside the UK/EEA. Where data is transferred internationally, it is done under the safeguards recognised by UK and EU data-protection law, such as standard contractual clauses.
8. How long we keep it. We keep your account and the content you create for as long as your account is active and we are providing the service, and for a reasonable period afterwards to meet our legal and operational needs. Session and audit records are kept for security and diagnostic purposes. You can ask us to delete your data at any time (see below), and we will do so unless we are required to keep it.
9. Your rights. Under UK data-protection law you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form. To exercise any of these, contact nirvanadesign@msn.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
10. Security. The service is served over HTTPS with security headers, sign-in is passwordless (magic link), access to your company's data is restricted to your company, and administrative actions are logged.
11. Changes. We may update this note from time to time; the version shown here at the time of your use applies. Material changes will be reflected in the version and date above. Version 1.1 (17 July 2026) added Google Analytics on our public pages, behind your consent, and described the cookies it sets.