The General Data Protection Regulation (GDPR) came into effect on May 25, 2018. Zoho Projects is committed to protecting your information when you use our services. Any information you provide is processed in accordance with applicable data protection laws, including GDPR. Zoho Projects, as the Data Processor, ensures your data is protected. To this end we have rolled out certain features to give you more control over your data. 

Data export

Whenever you export data from Zoho Projects, you have the option of protecting the file using a password. This ensures only you can access the data stored in the file. 

Data Encryption

The information you share when you create your portal (first name, last name, phone number, email ID) is encrypted at the backend ensuring your privacy is protected. 

When you create new custom fields you can mark the field as PII. You can choose to have these fields encrypted by checking the relevant box. 

Data Audit

Keeping track of portal activities is critical to ensuring control over your data. Head to Audit Log to track all activities that take place in your portal.

Should you ever want to discontinue our service, Zoho Projects gives you the option of deleting your portal. You can always take a backup of your data before deleting it.

Data Retention

Files that are exported from Zoho Projects are retained for a period of 15 days after which they will be deleted from our servers. Data import files will be deleted after 24 hours. 

When you delete your portal, we will retain your portal data on our servers for 90 days. Data will be permanently deleted from our servers after 90 days (you will not be able to recover or restore data during this period). 

Consent

We take your consent whenever you import data from third party tools to Zoho Projects. We can import data from other applications such as Jira or Basecamp only if you authorize Zoho Projects to use third party credentials for this purpose. All third party apps integration, which require Zoho Projects to share data, will be integrated only after your consent. There is a new setting which will allow you to enable or disable API access to your portal.