Privacy Policy

1. Information we collect

Information you give us. When you create an account, we collect your name, email address, password, and, if you choose, your company name, job title, and profile photo. When you buy a paid plan, our payment processor collects your card details; we receive only the card type, last four digits, expiration date, and billing address. When you contact support, we keep the messages you send.

Content you add to the Service. Tasks, projects, comments, files, estimates, time entries, and anything else you or your teammates add ("Customer Content").

Information collected automatically. When you use the Service we collect device and log data, such as IP address, browser type, operating system, pages viewed, and the date and time of each request. We also collect product usage events, such as which features you use, to keep the Service running and to improve it.

Information from third parties. If you sign in with Google or Microsoft, we receive your name, email address, and profile photo from that provider. If you connect an integration such as Jira, monday.com, Slack, GitHub, or Google Calendar, we receive the data you choose to import or sync.

2. How we use information

We use information to:

• provide, maintain, and secure the Service, including authentication and fraud prevention;
• process payments and send receipts, billing notices, and service announcements;
• respond to support requests;
• send product updates and newsletters, which you can unsubscribe from at any time;
• understand how the Service is used, using aggregated or de-identified data;
• comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use Customer Content to train general-purpose AI models.

3. Customer Content

We process Customer Content on behalf of the customer that owns the workspace. The workspace owner controls who can access it, how long it's kept, and when it's deleted. If your employer or another organization invited you to its workspace, that organization's policies also apply to the content you add. Business customers can request our Data Processing Addendum at privacy@taskd.sbs.

4. How we share information

We share information only in these cases:

• Service providers that host infrastructure, process payments, send email, and provide support tools, under contracts that limit their use of the data to providing services to us;
• Integrations you turn on, which receive the data needed to work, under their own terms and privacy policies;
• Other members of your workspace, who can see content and profile details according to workspace permissions;
• Business transfers, if TaskD is involved in a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different policy;
• Legal reasons, when we believe in good faith that disclosure is required by law or needed to protect the rights, safety, or property of TaskD, our users, or the public.

5. Cookies

We use cookies that are necessary to sign you in and keep the Service secure, cookies that remember your preferences, and analytics cookies that help us understand how the website is used. You can control cookies in your browser settings. We honor Global Privacy Control signals as an opt-out of any sharing that would require one under applicable law.

6. Data retention

We keep account information for as long as your account is active. When a workspace is deleted, we remove its Customer Content from production systems within 30 days and from backups within 90 days. We keep server logs for up to 12 months and billing records for as long as tax and accounting laws require, usually seven years.

7. Security

We encrypt data in transit with TLS 1.2 or higher and at rest with AES-256. Access to production systems is limited to employees who need it, protected by multi-factor authentication, and logged. No system is completely secure, so we can't guarantee absolute security, but we work to protect your information and will notify you of a data breach as the law requires.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most account details in Settings. To make any other request, write to privacy@taskd.sbs. We will verify your identity before acting and respond within 45 days. If your data is part of an organization's workspace, we may refer your request to that organization.

9. California residents

Under the California Consumer Privacy Act, as amended by the CPRA, California residents have the right to know what personal information we collect and how we use and disclose it, to delete it, to correct it, and to not be discriminated against for exercising these rights.

In the past 12 months we collected identifiers (such as name and email), commercial information (such as plan and billing history), internet activity (such as usage events), and professional information (such as job title). We collected it for the purposes described in Section 2 and disclosed it only to the categories of recipients in Section 4. We have not sold or shared personal information, and we do not knowingly sell or share the information of consumers under 16. You may use an authorized agent to make a request on your behalf.

10. International users

TaskD is based in the United States, and we store data in the United States. If you are in the European Economic Area, the United Kingdom, or Switzerland, we transfer your information under the European Commission's Standard Contractual Clauses and the UK Addendum. Our legal bases for processing are performing our contract with you, our legitimate interests in running and improving the Service, your consent where we ask for it, and compliance with law. You have the right to lodge a complaint with your local data protection authority.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We will post any changes on this page and update the effective date. If a change is material, we will notify account owners by email or in the app at least 30 days before it takes effect.

13. Contact us

Questions or requests: privacy@taskd.sbs.