Privacy Policy

Taskete (“we”, “us”, “our”) is a task management service available at taskete.co. We are committed to protecting your personal information and being transparent about how we use it.

Questions about this policy can be sent to hello@taskete.co.

We collect only what is necessary to provide the service:

• Account information: your email address and, optionally, a display name and a profile picture (an image you upload or a colour you choose).
• Task data: titles, descriptions, due dates, priorities, labels, projects, sections, comments, and any other content you add to Taskete.
• Activity data: a history of changes made in your workspaces, when tasks were completed, and Pomodoro focus sessions, used to show your activity feed and progress.
• AI usage data: a daily count of your AI requests (to apply your plan’s limits) and short-lived records that let the assistant ask you a follow-up question.
• Integration settings: webhook URLs, API keys (we store only a hashed form), and your email-to-task address, if you set these up.
• Billing information: if you subscribe to a paid plan, we receive your plan, subscription status, renewal date, and Paddle customer and subscription IDs from Paddle. Your payment details go to Paddle, not to us.
• Calendar connection tokens: if you choose to connect Google Calendar or Outlook, we store OAuth access and refresh tokens server-side. These are never exposed to the browser.
• Usage preferences: theme, font, notification settings, and similar UI choices stored in your profile.
• Technical data: standard server logs (IP address, browser type, pages visited) retained for up to 30 days for security and debugging purposes, and short-lived request counters used to limit abuse, deleted within a day.

We do not collect payment card details, sell your data, or use your task content to train AI models.

Your data is used solely to:

• Provide, maintain, and improve the Taskete service
• Send service emails, such as workspace invitations and notifications you have opted into
• Show events from your connected calendar (Google or Outlook) alongside your tasks, when you enable this feature
• Process payments and manage your subscription, through Paddle
• Respond to support requests
• Detect and prevent abuse or security incidents

When you use AI features (the assistant, natural language task creation, task breakdown, and the daily AI summary), our server sends Google Gemini the information it needs to respond: what you type to the assistant and the conversation so far, the titles and details (such as due dates, priorities, and labels) of relevant tasks, your project and label names, the titles of tasks you completed today, and your local date and time. These requests are subject to Google’s API terms. We do not send the descriptions saved on your tasks, but anything you type to the assistant is sent, and the assistant may use it to write a task description.

If you join a team workspace, other members can see your name, profile picture, and email address, along with the tasks and comments you add there. If you set up an outbound webhook, task data is sent to the URL you choose.

Data obtained through Google Workspace APIs (e.g., Google Calendar) is never used to develop, improve, or train generalized AI or machine learning models.

Taskete uses the following third-party providers to operate:

• Supabase: database, authentication, and realtime infrastructure (EU region). Privacy policy
• Vercel: hosting and edge network. Privacy policy
• Google Gemini API: AI features. Terms
• Resend: sending service emails, such as invitations and notifications. Privacy policy
• Paddle: payments and subscriptions. Paddle is the merchant of record for paid plans and receives your name, email address, country, and payment details when you subscribe. Privacy policy
• Cloudflare: receives emails sent to your email-to-task address and passes them to Taskete. Privacy policy
• Google Calendar API / Microsoft Graph API: only accessed when you explicitly connect your calendar account.

Taskete’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not share your data with any other third parties, apart from the destinations you configure yourself, such as webhooks.

Your account data is retained for as long as your account is active. If you delete your account, all associated data (tasks, projects, labels, preferences) is permanently deleted within 30 days. Calendar OAuth tokens are deleted immediately when you disconnect a calendar in Settings.

Deleting your account does not cancel a paid subscription. Cancel it first in Settings → Account → Manage billing. Paddle keeps its own billing records as required by tax law, under its privacy policy.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Object to or restrict certain types of processing
• Export your data in a portable format

To exercise any of these rights, email hello@taskete.co. We will respond within 30 days.

Taskete uses only strictly necessary cookies:

• Session cookies set by Supabase Auth to keep you signed in
• A cookie that remembers which workspace you last had open

We also use your browser’s local storage for interface preferences, such as theme and font, and to remember that you have seen our cookie notice. When you open checkout, Paddle may set its own cookies needed to process payment and prevent fraud, covered by Paddle’s privacy policy.

We do not use tracking cookies, advertising cookies, or third-party analytics. Strictly necessary cookies don’t require consent under GDPR; our cookie notice is there to tell you about them.

All data is transmitted over HTTPS. Sensitive credentials (OAuth tokens, API keys) are stored server-side only and never sent to the browser. Row-level security policies in our database ensure users can only access their own data.

If we make material changes to this policy, we will update the effective date at the top of this page. Continued use of Taskete after a change constitutes acceptance of the updated policy.

For privacy questions or requests: hello@taskete.co