Short summary for early testers. Not a full GDPR document; ask for a DPA if you need one for production use.
Account email, display name, session tokens, task/board/bus content you create, and optional Telegram bot token and chat id if you provide them.
To run the dashboard, route messages to your workspace, and improve stability. We do not sell your personal data.
Alpha retention is operational: data remains until you delete the account (contact operator) or the alpha ends.
Reasonable measures (TLS at the edge, access controls) apply; no system is perfectly secure.