Privacy Policy

1. Information we collect

• Account data: your name, email address, password (stored only as a cryptographic hash), profile photo, and authentication identifiers from Google or GitHub when you sign in with those providers.
• Workspace data: workspaces, projects, tasks, comments, attachments, and activity history you and your team create in the Service.
• Usage data: pages viewed, features used, and approximate device and browser information collected for diagnostics and product improvement.
• Cookies: strictly necessary cookies for sign-in sessions and optional preference cookies. See Section 8.

2. How we use your information

• Provide, operate, and maintain the Service, including AI task assistance you request.
• Send transactional emails: verification, password reset, invitations, task reminders, and notifications.
• Send an optional welcome and onboarding email when you register.
• Monitor for abuse, prevent fraud, and enforce our Terms of Service.
• Improve reliability and performance through aggregated analytics and error monitoring.

3. Data storage and security

Application data is stored in managed MongoDB databases, and uploaded files are stored through our file-storage provider. Data is encrypted in transit (TLS/HTTPS) and access is restricted by role within your workspace. Passwords are hashed and never stored in plain text. We review our security practices regularly; no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

4. Third-party services

We share data only with the processors required to run the Service:

• Resend — transactional email delivery (verification, invitations, reminders).
• UploadThing — storage and serving of files you attach to tasks.
• Stripe — payment processing for paid plans. Card details go directly to Stripe; we never store full card numbers.
• Sentry — error and performance monitoring.
• Google (Gemini API) — AI task suggestions and description generation on prompts you submit.

5. Your rights (GDPR and India DPDP Act)

Depending on your location, you have the right to access, correct, export, and delete your personal data; to object to or restrict certain processing; and to withdraw consent. Users in India have corresponding rights under the Digital Personal Data Protection Act, 2023, including the right to erasure and grievance redressal.

To exercise any right, email privacy@tasksprint.app. Workspace owners may also export task data at any time from the dashboard. We respond to verified requests within 30 days.

6. Data retention

• Account and workspace data are retained while your account is active.
• Verification and password-reset tokens expire automatically within 24 hours and 1 hour respectively.
• When you delete your account, personal data is removed within 30 days except where retention is legally required.
• Error logs retained by our monitoring provider are kept for a rolling 90 days.

7. Children

The Service is not directed to anyone under 16, and we do not knowingly collect their personal data. If you believe a minor has provided data, contact privacy@tasksprint.app and we will delete it.

8. Cookies

We use strictly necessary cookies to keep you signed in and to secure your session (these cannot be disabled), and we store your cookie preferences locally in your browser. We do not use third-party advertising or cross-site tracking cookies.

9. Changes to this policy

We may update this Privacy Policy as the Service evolves. Material changes will be announced in the app or by email at least 14 days before taking effect. The "Last updated" date above always reflects the current version.

10. Contact

Questions or privacy requests: privacy@tasksprint.app.