Effective July 8, 2026. Plain-English by design: if anything here is unclear, that’s a bug — tell us and we’ll fix the wording.
Account information. When you sign up: your name and email address, and a password (stored only in hashed form — we cannot read it).
What you put into the platform. Projects, tasks, notes, memberships — the work content you and your organization create. It exists so the tool can work for you; it is never mined for advertising.
Basic technical logs. Like nearly every website, our server records IP addresses and request logs. We use these for security (for example, blocking break-in attempts) and for fixing problems — not for building marketing profiles.
To keep parts of this platform free or affordable, we may show advertisements from vendors we choose to work with. Here is exactly how that works:
We set one cookie: a session cookie that keeps you logged in. It is HttpOnly (scripts can’t read it), expires after 8 hours, and identifies your login session — nothing more. We do not use advertising or cross-site tracking cookies.
If you use Engagement Squared through your employer or another organization, the work data in that organization’s account belongs to that organization. Organizations are isolated from one another — one tenant can never see another tenant’s data.
Your connection to us is encrypted (HTTPS). Access to production systems is restricted and monitored, sign-in attempts are rate-limited and brute-force attempts are automatically blocked, and the database enforces organization-level isolation at the data layer — not just in the application. No one can honestly promise perfect security; we can promise it is engineered deliberately and reviewed continuously.
To exercise any of these, email privacy@engagementsquared.com.
Engagement Squared is a work platform, not directed to children under 13, and we do not knowingly collect their information.
Family Magazine. Accounts and family seats are for adults (18+); taking a seat asks for that word, and a recorded under-18 birthday refuses a seat outright. A child appears only because a parent or legal guardian put them in their own family’s tree or pages — recording a child’s birthday requires that adult’s attestation, kept with their name and date. Children’s contact details never enter the family directory, are never emailed, and are never printed. A parent or guardian can keep a child’s page private from the rest of the family at any time, and their word wins over the organizer’s.
If we change this statement in any way that matters, we’ll say so plainly on the site (and email account holders for significant changes) before the change takes effect — with a dated changelog, not a silent rewrite.
privacy@engagementsquared.com — a human reads it.