Privacy Policy
Last updated: October 17, 2026
PrimeScheduler ("we", "our", or "the Power-Up") is a Trello Power-Up that allows users to schedule card comments for a specific time. This Privacy Policy explains what data we collect, how we use it, and how we protect it.
1. Data we collect
When you authorize PrimeScheduler, we collect and store:
- Trello OAuth token — used to post comments on your behalf at the scheduled time. Stored encrypted using AES-256-GCM.
- Trello Member ID — used to identify your account and associate your scheduled jobs.
- Card ID and comment text — stored temporarily until the comment is sent, then deleted within 48 hours.
- Scheduled send time — stored with the job until delivery.
If you choose to give us your email (for example to unlock extra free comments in the Power-Up), we store that email address together with your Trello Member ID and the number of comments you have used. We use it only to contact you about PrimeScheduler. It is deleted automatically after 90 days, or sooner on request.
If you subscribe to Pro, payment is handled by Paddle (see section 4). We store only your plan status (free or Pro) linked to your Trello Member ID. We never see or store your card details.
We do not collect any other personal information beyond what is listed above.
2. How we use your data
Your data is used exclusively to:
- Post scheduled comments on Trello cards on your behalf at the time you selected.
- Display your pending scheduled comments within the Power-Up interface.
- Allow you to cancel pending scheduled comments.
- Manage your plan (free tier limit or Pro subscription).
- Reply to you if you contact us or give us your email.
We do not use data from the Power-Up for advertising, analytics, or any purpose other than delivering the core functionality of the Power-Up.
3. Data storage and security
Your OAuth token is encrypted with AES-256-GCM before storage. All data is stored in Upstash Redis, hosted on servers in the EU (Frankfurt, Germany). Data in transit is protected by HTTPS/TLS.
Job metadata (card ID, comment text, send time) is automatically deleted 48 hours after the scheduled send time. OAuth tokens are stored for up to 1 year or until you disconnect your account.
4. Data sharing
We do not sell, rent, or share your data with third parties, except:
- Trello API — your OAuth token is used to call the Trello API to post comments on your behalf.
- Upstash — our infrastructure provider for encrypted data storage.
- Vercel — our hosting provider for the website and backend API, and the provider of cookieless website analytics.
- Paddle — our reseller and Merchant of Record. Paddle processes your payment, billing details and email address when you subscribe, under its own privacy policy.
- Resend — used to deliver email notifications to the PrimeScheduler operator (for example when you submit your email in the Power-Up).
All third-party providers are GDPR-compliant.
5. Your rights
You can disconnect PrimeScheduler at any time by clicking "Disconnect account" inside the Power-Up. This immediately revokes your OAuth token, cancels all pending scheduled comments, and deletes your stored data.
When you revoke PrimeScheduler's access in Trello, or your access token expires, we automatically delete your token and scheduled comments. Your plan status is kept so that a paid subscription is not lost. When your Trello account is deleted, we also delete your plan status.
If you wish to request deletion of any remaining data, including an email address you gave us, contact us at the email address below.
6. Cookies
PrimeScheduler does not use cookies. Our website (not the Power-Up) uses Vercel Web Analytics to count page views. It works without cookies, does not collect personal data and does not track you across sites.
7. Children's privacy
PrimeScheduler is not directed at children under the age of 13 and we do not knowingly collect data from children.
8. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent update. Continued use of the Power-Up after changes constitutes acceptance of the updated policy.
9. Contact
If you have any questions about this Privacy Policy or your data, please contact us at:
support@vaclavburian.cz