Privacy Policy

Last Updated: September 26, 2026

California Residents: This Privacy Policy describes how we collect, use, and protect your personal information in compliance with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). Please see Section 7 for your California-specific rights and how to exercise them.

1. Introduction

Welcome to our Task Management Application. We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains our information practices, the types of data we collect, how we use it, and the rights you have regarding your information.

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration: When you create an account, we collect your username, email address, and password (encrypted).
Task Data: All tasks, notes, descriptions, and data you create within the Service.
Profile Information: Any additional information you voluntarily provide in your account profile.
Communications: When you contact us for support, we collect the contents of your messages and any attachments.
Subscription Information: When you subscribe, we store your Stripe customer and subscription identifiers, your subscription status, and your renewal date. We never receive or store your card number, expiry date, or security code — those are entered on Stripe's own payment page and handled by Stripe.

2.2 Information Collected Automatically

Device Information: IP address, browser type, operating system, and device identifiers.
Usage Data: Pages visited, time spent on the Service, links clicked, and features used.
Log Data: Access times, error logs, and referral sources.
Cookies & Similar Technologies: We may use cookies and similar tracking technologies to enhance your experience and analyze usage patterns.

2.3 Information from Third Parties

Third-Party Services: If you integrate third-party services with our platform, we may receive information necessary for the integration.
Payment Processor (Stripe): Stripe, Inc. processes subscription payments for us and tells us whether your subscription is active, when it renews, and when a payment fails. Stripe may also share limited billing details such as the card brand, its last four digits, and the country of issue. Stripe's use of your information is governed by the Stripe Privacy Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve the Task Management Service
To process and fulfill your requests and transactions
To manage your subscription, including taking payment, renewing it, and handling cancellations and refunds
To send account-related notifications and updates
To respond to your inquiries and provide customer support
To prevent fraud, abuse, and security incidents
To analyze usage patterns and improve user experience
To send promotional materials (only with your consent)
To comply with legal obligations and enforce our agreements
To backup and protect your task data

4. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following limited circumstances:

Service Providers: We may share data with third-party vendors (e.g., hosting providers, analytics services) who assist in operating our Service. These vendors are bound by confidentiality agreements.
Payment Processing: When you subscribe, your email address and account identifier are shared with Stripe, Inc. so that it can create your customer record, take payment, and manage renewals and cancellations. We share only what is needed to bill you, and Stripe acts as an independent controller of the payment data it collects.
Legal Requirements: We may disclose information if required by law, such as in response to valid legal requests (subpoenas, court orders, law enforcement requests).
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Safety & Protection: We may disclose information to protect the security, safety, and rights of our Service, users, and the public.

5. Data Security

We implement industry-standard security measures to protect your information, including:

Encryption of data in transit (HTTPS/TLS)
Encrypted storage of sensitive information (passwords)
Regular security audits and updates
Access controls to limit employee access to personal data
Secure backup procedures

However, no security system is completely impenetrable. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your information for as long as your account is active or as necessary to provide the Service. You may request deletion of your account and associated data at any time. Upon deletion:

Your account and task data will be removed from active systems within 30 days
Backup copies may be retained for up to 90 days for disaster recovery purposes
We may retain limited information (e.g., transaction records) as required by law
Deleting your account cancels your subscription immediately. Stripe keeps its own record of past payments and invoices for the period required by tax and accounting rules, which we cannot delete on your behalf

7. California Consumer Privacy Rights (CCPA & CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

7.1 Right to Know

You have the right to request what personal information we collect, use, share, and sell about you. We will provide you a copy of the personal information we maintain about you in a portable and readily useable format.

7.2 Right to Delete

You have the right to request the deletion of personal information we have collected from you, except where an exception applies. We will delete your information and direct service providers to delete your information unless the law permits or requires us to retain it.

7.3 Right to Opt-Out of Sale or Sharing

We do not sell your personal information. However, if in the future we do engage in the sale or sharing of personal information, you have the right to opt-out. You can submit an opt-out request by contacting us using the information in Section 9.

7.4 Right to Correct

Under CPRA, you have the right to correct inaccurate personal information we maintain about you.

7.5 Right to Limit Use & Disclosure

You have the right to limit our use and disclosure of your sensitive personal information (such as passwords) to purposes necessary to provide the Service you requested.

7.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA or CPRA rights, including by denying goods or services, charging different prices, or providing a lower quality of service.

7.7 How to Exercise Your Rights

To exercise any of these rights, please submit a request by:

Email: [email protected] with "California Privacy Request" in the subject line

We will verify your identity and respond to your request within 45 days. You may designate an authorized agent to submit requests on your behalf with proper verification.

8. Children's Privacy

Our Service is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will promptly delete such information and take appropriate action to remove the child's account. Parents or guardians who believe their child has provided information to us should contact us immediately.

9. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our privacy practices, please contact us at:

Email: [email protected]
Subject Line: Privacy Inquiry or California Privacy Request

For California Privacy Requests, please include "California Privacy Request" in the subject line. We will respond to your inquiry within 45 days.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date above. Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.

11. Third-Party Links

Our Service may contain links to third-party websites and services that are not operated by us. This Privacy Policy does not apply to these external sites. We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy policies before providing your information.

12. Data Processing Addendum (DPA)

For users who are located outside the United States or have specific data processing requirements, we can provide a Data Processing Addendum. Please contact us for more information.