Privacy Policy

This Privacy Policy explains how Taskonomy (“we”, “us”) collects, uses, and shares information when you use our websites and workspace product (the “Service”).

1. Information we collect

We may collect:

• Account data — name, email address, password hashes / auth tokens, and profile details you provide
• Organization data — workspace name, members, roles, invitations, and billing-related metadata
• Customer Content — projects, tasks, files, messages, and other content you or your teammates submit
• Usage and device data — logs, approximate location derived from IP, browser type, and product analytics needed to operate and secure the Service
• Payment data — processed by Stripe; we receive limited billing identifiers and status, not full card numbers

2. How we use information

We use information to:

• Provide, maintain, and improve the Service
• Authenticate users and enforce plan entitlements and storage limits
• Process subscriptions and send transactional notices
• Detect abuse, prevent fraud, and secure the Service
• Comply with legal obligations

We do not sell personal information.

3. Sharing

We may share information with:

• Service providers (hosting, email, analytics, Stripe) under contractual obligations
• Professional advisors when required
• Authorities when required by law or to protect rights and safety
• A successor entity in connection with a merger, acquisition, or asset sale

Organization admins can invite members who will see Customer Content according to roles and permissions you configure.

4. International transfers

We may process data in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

5. Retention

We retain account and Customer Content for as long as the organization remains active and as needed for legitimate business, security, and legal purposes. After deletion requests or account closure, we delete or anonymize data within a reasonable period unless retention is required by law.

6. Security

We use industry-standard measures such as encryption in transit, access controls, and least privilege for production systems. No system is completely secure; please use strong passwords and protect invite links.

7. Your choices

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Contact us to exercise these rights. You may also update profile details in the product or ask an organization admin to remove your membership.

8. Children

The Service is not directed to children under 16 (or the applicable age of digital consent). We do not knowingly collect personal data from children.

9. Cookies

We use essential cookies and similar technologies for authentication and security. Where we use non-essential analytics, we will seek consent as required by applicable law.

10. Changes

We may update this Policy by posting a new version with an updated date. Material changes may also be communicated in-product or by email.

11. Contact

Privacy questions: [email protected]. Update this contact to your operating entity before production launch.

Related: Terms of Service.