Security and data
How Reporta handles your data
Postgres per-workspace isolation (every row carries its workspace); third-party keys and OAuth tokens encrypted with AES-256-GCM; Google access is read-only.
What Reporta holds
- Client names, logos and contact emails
- Project notes and forwarded emails
- Task lists
- Marketing and project metrics
- Reports, comments and who they were sent to
How long it’s kept, and how to export or delete it
Raw inputs deleted after 1, 2 or 5 years (2 by default); reports until deleted; /try samples after 24 hours.
The full detail is in Reporta’s data export and deletion policy.
Who processes it
Service providers (subprocessors), each on our instructions and only for the purpose shown:
- Render: hosting, databases and backups, in the United States.
- Stripe: subscription and license payments (card details go to Stripe, never to us).
- Resend: receiving forwarded project updates and sending the report emails you approve.
- Anthropic: writing reports from your notes, tasks and metrics.
Questions and security reports
Reporta is run by New Odyssey. To ask what we hold about you, to have it exported or deleted, or to report a security problem, email clio@new-odyssey.com. The privacy policy covers the rest.