Privacy Policy

1. Introduction

Welcome to TaskStart ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our task management application and related services (collectively, the "Service").

Project Type: TaskStart is operated as a personal project by an individual developer (Anu Jain), not as a business entity or corporation.

By using TaskStart, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

When you use TaskStart, we collect the following information:

• Account Information: Email address and name (provided via Google OAuth)
• Task Data: Tasks, descriptions, categories, tags, priorities, completion status, small actions, schedules, and waiting tasks you create
• User Settings: Preferences and configuration settings for your account
• Chat Messages: Messages you send to our AI assistant for task clarification and organization

2.2 Automatically Collected Information

• Authentication Tokens: OAuth tokens from Google for authentication purposes
• Session Data: Session cookies to keep you logged in
• Usage Data: Information about how you interact with our Service
• Log Data: IP address, browser type, pages visited, time and date of visits, and other diagnostic data

2.3 Third-Party Data

We receive limited information from third-party services:

• Google OAuth: Your email address, name, and profile information when you sign in with Google

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Provision: To provide, maintain, and improve the TaskStart Service
• Authentication: To verify your identity and manage your account
• AI Features: To provide AI-powered task clarification and organization suggestions using Google Gemini API
• Communication: To send you service-related notifications and respond to your inquiries
• Security: To detect, prevent, and address technical issues and security threats
• Legal Compliance: To comply with legal obligations and protect our rights
• Service Improvement: To analyze usage patterns and improve our Service (only with aggregated, anonymized data)

4. Third-Party Services and Data Sharing

4.1 Google Services

We use the following Google services, which process your data according to their own privacy policies:

• Google OAuth: For secure authentication. See Google's Privacy Policy
• Google Gemini API: For AI-powered task suggestions. Your task data is sent to Google's servers for processing. We do not authorize Google to use your data for training their models.

4.2 Data Sharing Limitations

We do NOT:

• Sell your personal information to third parties
• Share your task data with advertisers
• Use your data for marketing purposes without your consent
• Share your information except as described in this Privacy Policy

4.3 When We May Disclose Information

We may disclose your information:

• To comply with legal obligations, court orders, or government requests
• To protect our rights, property, or safety, and that of our users
• In connection with a business transaction (merger, acquisition, or sale of assets)
• With your explicit consent

5. Your Rights and Choices

5.1 Access and Portability

You have the right to access and export your personal data. You can download all your data in a structured format through your account settings.

5.2 Correction and Updates

You can update your account information and task data at any time through the Service interface.

5.3 Deletion (Right to be Forgotten)

You have the right to request deletion of your account and all associated personal data. To exercise this right, please contact us using the information below. We will delete your data within 30 days, except where we are legally required to retain it.

5.4 Data Processing Objection

You can object to certain types of data processing. For example, you can choose not to use AI features if you don't want your tasks sent to Google Gemini.

5.5 Cookie Management

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of our Service. See our Cookie Policy for more details.

5.6 GDPR Rights (EU Users)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Note: We may use anonymized, aggregated data for service improvement and analytics. This anonymized data cannot be used to identify you personally.

5.7 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to equal service and price
• Right to request deletion of personal information

Note: TaskStart does NOT sell your personal information.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication using OAuth 2.0
• Access controls and authentication requirements
• Regular security assessments
• Secure database storage with PostgreSQL

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active
• Task Data: Retained until you delete tasks or your account
• Log Data: Retained for up to 90 days for security and diagnostic purposes
• Deleted Data: Permanently deleted within 30 days of account deletion request, except where legally required to retain

8. International Data Transfers

Your information is processed and stored in the United States (AWS - US East, Virginia region). If you are accessing TaskStart from outside the United States, your information will be transferred to and processed in the United States.

The United States may have data protection laws that differ from your jurisdiction. If you are in the EEA, we ensure appropriate safeguards are in place for international data transfers, such as Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

10. AI and Automated Decision-Making

We use Google Gemini AI to provide task clarification and organization suggestions. This processing:

• Is initiated only when you actively use chat or AI features
• Sends your task context to Google's servers for processing
• Generates suggestions that you can choose to accept or reject
• Does NOT make automated decisions that significantly affect you

You always have final control over your task data and can choose not to use AI features.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

12. Contact Us

13. Additional Information for Specific Jurisdictions

13.1 European Economic Area (EEA)

Legal basis for processing your personal data under GDPR:

• Contract Performance: Processing necessary to provide the Service
• Consent: For optional features like AI assistance
• Legitimate Interests: For service improvement and security
• Legal Obligation: To comply with applicable laws

13.2 United Kingdom

We comply with UK GDPR and the Data Protection Act 2018.

13.3 Other Jurisdictions

We strive to comply with applicable data protection laws in all jurisdictions where we operate.