M-Project · last updated 2 November 2026
Your account (name, email address, optional profile photo and status) and the content you and your workspace members create: pages, databases, comments, messages and uploaded files. Passwords are stored only as a salted hash.
A workspace admin can connect a Google account so files uploaded in M-Project are kept in that Google Drive. M-Project asks only for your email address and the drive.file permission, which gives access only to files M-Project itself creates or that you open with it — not to the rest of your Drive.
The Google refresh token is stored encrypted and is used only to upload, read and show those files to members of the same workspace. Google user data is not sold, not used for advertising and not shared with third parties.
M-Project's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Data is stored on Cloudflare (Workers, Durable Objects, D1) and, for connected workspaces, in the connected Google Drive.
You can remove M-Project's access to your Google account at any time at myaccount.google.com/permissions. To delete your account or workspace data, contact the address below.