Privacy Policy
TaskAura ("we," "us," or "our") operates the taskaura.org website and the TaskAura application (together, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign in with Google, we receive your name, email, and profile picture from Google.
Usage Data
We collect information about how you interact with the Service, including pages visited, features used, timestamps, browser type, device type, and IP address. This data is collected through server logs and analytics.
User Content
We store the tasks, notes, workspace data, and chat messages you create within the Service. This content is necessary to provide the Service and is stored securely in our database infrastructure.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Authenticate your identity and manage your account
- Sync your data across devices in real time
- Send transactional emails (account confirmation, password resets)
- Monitor for security threats and abuse
- Respond to support requests
3. Data Storage and Security
Your data is stored on infrastructure provided by Supabase (hosted on AWS) and served through Vercel. All data is transmitted over HTTPS with TLS encryption. Passwords are hashed using industry-standard algorithms. We implement access controls, audit logging, and regular security reviews to protect your data.
4. Data Sharing
We do not sell, rent, or trade your personal information. We may share data only in these circumstances:
- Service providers: We use Supabase (database/auth), Vercel (hosting), and Google (OAuth) to operate the Service. These providers process data on our behalf under their own privacy policies.
- Team workspaces: When you join a team workspace, your name and tasks are visible to other members of that workspace.
- Legal requirements: We may disclose information if required by law, legal process, or to protect the rights, safety, or property of TaskAura or others.
5. Your Rights
You may:
- Access your data by signing in and viewing your workspaces
- Export your data at any time through the application
- Delete your account and all associated data by contacting us at privacy@taskaura.org
- Correct inaccurate data through your account settings
6. Cookies and Local Storage
We use browser local storage to cache your workspace data for offline access and faster load times. We use session cookies for authentication. We do not use third-party advertising or tracking cookies.
7. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
8. International Data Transfers
Your information may be transferred to and processed in the United States, where our infrastructure providers are located. By using the Service, you consent to this transfer.
9. California Privacy Rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
- Right to Opt-Out of Sale: We do not sell, rent, or share your personal information with third parties for their direct marketing or commercial purposes. There is nothing to opt out of.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise your California privacy rights, contact us at privacy@taskaura.org with the subject line "California Privacy Request."
10. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account data (name, email) is retained until you request deletion or your account is terminated.
- Workspace and task data is retained for the duration of your account and deleted within 30 days of an account deletion request.
- Server logs and usage data are retained for up to 90 days for security and diagnostic purposes.
- Backups may retain copies of deleted data for up to 30 additional days before being purged from backup systems.
To request deletion of your data, email privacy@taskaura.org. We will confirm and complete the deletion within 30 days.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.
12. Contact Us
If you have questions about this Privacy Policy, contact us at privacy@taskaura.org.